FindSystemManager
Static task
static1
Behavioral task
behavioral1
Sample
eb913833e7ebe0f3b33c050fb3607f54_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
eb913833e7ebe0f3b33c050fb3607f54_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
eb913833e7ebe0f3b33c050fb3607f54_JaffaCakes118
-
Size
188KB
-
MD5
eb913833e7ebe0f3b33c050fb3607f54
-
SHA1
df648ec04427cf0578f98b7ade9e122e0b840f57
-
SHA256
7c9b8f1d3c3ca6118b10820f16ede0fa5fd3928c957608471e38d496ba047788
-
SHA512
7abcfe3689b0e3d09694f5aa5d19438b2e327e67f4743d8cca4f733405a39f35c27098bd801115c822012da10a91e0db7f9b0b0767a07904ba3e405c6ca1b80a
-
SSDEEP
3072:hH0bRqs50IIPKqCdVJ2GxqSsr23J0YoVqGzDQN:t0bo1IyCdn2gir23qvqG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb913833e7ebe0f3b33c050fb3607f54_JaffaCakes118
Files
-
eb913833e7ebe0f3b33c050fb3607f54_JaffaCakes118.dll windows:4 windows x86 arch:x86
b5a888d35e7bfb6fde2c50604c48699f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetWindowLongA
SetUserObjectSecurity
BroadcastSystemMessageA
CreateDesktopA
CloseDesktop
CharPrevA
ChangeMenuA
AnimateWindow
BeginPaint
GetClassInfoA
SetCapture
IsZoomed
MessageBoxA
RegisterClassA
OpenClipboard
CharLowerA
MessageBeep
SetClipboardData
EnumWindows
ReplyMessage
SetActiveWindow
SetCursor
SetFocus
SetWindowPos
EnableScrollBar
DeferWindowPos
CreatePopupMenu
AttachThreadInput
ChildWindowFromPoint
SetScrollInfo
CreateMenu
comctl32
ord5
InitializeFlatSB
ord3
PropertySheetA
CreateToolbarEx
ImageList_Copy
ord13
Exports
Exports
Sections
.text Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.udata Size: 4KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ