tauhiuw
Static task
static1
Behavioral task
behavioral1
Sample
ebb2cd79298221abc3ba55633f309bbd_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
ebb2cd79298221abc3ba55633f309bbd_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ebb2cd79298221abc3ba55633f309bbd_JaffaCakes118
-
Size
19KB
-
MD5
ebb2cd79298221abc3ba55633f309bbd
-
SHA1
c90a019ebed9be698ddfe6b6b07d15f4b34298c4
-
SHA256
92f18819370689746dd46af2e8ca59bb3be2abbe63bda46284e2c68c72a67ae3
-
SHA512
43abad819a4a1ba9e07df51d65a914ef19773cf6c91ecde0186a6ad4bb62e039bfbf1f8773ea56e5da1721621685c2d4aa28c2bd2bb76d86c43ded3c21ee829f
-
SSDEEP
384:q1I4CP/l5tOCA2+8K1LIOEVLIx7FpVaDUXe7kPJ6LY2gnj:OINP/a2+8KhjnZpQDUSo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebb2cd79298221abc3ba55633f309bbd_JaffaCakes118
Files
-
ebb2cd79298221abc3ba55633f309bbd_JaffaCakes118.dll windows:4 windows x86 arch:x86
6c3359d60b062b54f794cdb2809d427f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CreateWindowExW
VkKeyScanA
UpdateWindow
UnregisterHotKey
TranslateMessage
ShowWindow
SetWindowTextA
SendMessageA
ScreenToClient
ReleaseDC
ChangeClipboardChain
RegisterHotKey
RegisterClassExA
RegisterClassA
MessageBoxA
LoadIconA
LoadCursorA
GetSystemMetrics
GetMessageA
GetDC
DispatchMessageA
DefWindowProcA
CreateWindowExA
kernel32
GetModuleHandleW
lstrcpyA
lstrcatA
WriteFile
SwitchToFiber
Sleep
LocalFree
LocalAlloc
HeapAlloc
GetModuleHandleA
GetLocalTime
GetCommandLineA
ExitThread
ExitProcess
DeviceIoControl
DeleteFileA
CreateFileA
CloseHandle
Beep
BackupSeek
gdi32
RoundRect
SelectObject
GetLogColorSpaceA
GetDIBits
CreateCompatibleDC
DeleteObject
DeleteDC
CreateDIBSection
StretchBlt
ws2_32
gethostbyname
socket
setsockopt
recv
WSASocketA
ntdll
NtWaitLowEventPair
NtQuerySemaphore
NtPrivilegeCheck
NtAllocateLocallyUniqueId
RtlGetProcessHeaps
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ