ifksjw
Static task
static1
Behavioral task
behavioral1
Sample
eb73889beed7e515188d49826ef72928_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb73889beed7e515188d49826ef72928_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
eb73889beed7e515188d49826ef72928_JaffaCakes118
-
Size
16KB
-
MD5
eb73889beed7e515188d49826ef72928
-
SHA1
5804c97526be441e5bc84017eb64a910fcf08b22
-
SHA256
39cbb02dfff4b17d8e49b547f7f4faf06b4c366f6a53ad82130617e098178458
-
SHA512
99701059c8e6069e44887ce273151d6c66b4976ad6bdacdfd8cc1a9cee2fb57145cb5d621f380c466cf816264429b3ca7c2c75d4ab41e2453cb95a362cab39c4
-
SSDEEP
384:EIJyfRvhP+If9fXNIMaNHP9jvxIJpJ63:2fRvv9vteZIS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb73889beed7e515188d49826ef72928_JaffaCakes118
Files
-
eb73889beed7e515188d49826ef72928_JaffaCakes118.dll windows:4 windows x86 arch:x86
19c33eaa977a9e3b63bbd37ca8d462ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CallWindowProcW
SendMessageW
RegisterClassExW
UpdateWindow
TranslateMessage
ShowWindow
wsprintfA
SetWindowTextA
SetFocus
SendMessageA
RegisterClassExA
PostQuitMessage
MoveWindow
MessageBoxA
MessageBeep
LoadIconA
LoadCursorA
KillTimer
GetSystemMetrics
GetMessageA
GetDlgItem
EndDialog
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
DdeAccessData
CreateWindowExA
kernel32
lstrlenA
lstrcatA
WriteFile
SystemTimeToFileTime
SleepEx
Sleep
RtlZeroMemory
RtlMoveMemory
ReadFile
OpenMutexA
LoadLibraryExA
LoadLibraryA
HeapCreate
GetTickCount
GetSystemTime
GetProcessHeaps
GetModuleHandleA
GetCommandLineA
FlushViewOfFile
ExitThread
ExitProcess
DeviceIoControl
CreateFileA
CloseHandle
BeginUpdateResourceA
FreeLibrary
comdlg32
GetOpenFileNameA
GetSaveFileNameA
comctl32
CreateToolbarEx
gdi32
ScaleWindowExtEx
RemoveFontResourceA
GetWindowExtEx
GetStockObject
ws2_32
connect
recv
socket
setsockopt
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ