Static task
static1
Behavioral task
behavioral1
Sample
f1b7cf338324a590bdae1c6fc48010ed_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1b7cf338324a590bdae1c6fc48010ed_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f1b7cf338324a590bdae1c6fc48010ed_JaffaCakes118
-
Size
110KB
-
MD5
f1b7cf338324a590bdae1c6fc48010ed
-
SHA1
d01ca66b97b1e1c592875a78c930795604622db1
-
SHA256
652e40de0c99d766e97d39b741de61cc04fd7de1f018bcf30929c75a47708960
-
SHA512
9278028cfa50ffe5b6ab2de963aba31ee0ff95223af42479d7045216a24d437e3240e6710a6d63ae7c57c24b295421c37f4dd603328b9f9baece0b1e9fe77bd3
-
SSDEEP
1536:1kKTGq50yrb9pn5pTYA4NYMf22j9bg8HdClV2fqUGjj+AYjWwlbx00AFg55q59:XTGq5D9p5pONYkFO890XUfDjrlbX4/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1b7cf338324a590bdae1c6fc48010ed_JaffaCakes118
Files
-
f1b7cf338324a590bdae1c6fc48010ed_JaffaCakes118.dll windows:4 windows x86 arch:x86
de148f3a6addb89c494d4df323ee106c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dinput
DirectInputCreateW
DirectInputCreateA
dsound
DirectSoundCaptureCreate
DirectSoundCreate
DirectSoundFullDuplexCreate
DirectSoundCreate8
shell32
SHBindToParent
SHGetPathFromIDListA
ShellExecuteExW
SHFileOperationA
user32
CreateIconFromResourceEx
CreateDesktopW
CreateCursor
CreateAcceleratorTableA
CopyImage
DefDlgProcA
CharToOemBuffA
CharPrevA
CharNextA
BeginPaint
wsprintfA
DeleteMenu
EnableMenuItem
EndPaint
ShowScrollBar
ShowCaret
MessageBoxA
GetFocus
CharUpperA
LoadAcceleratorsW
LoadCursorA
kernel32
CompareStringA
EnumResourceLanguagesW
lstrcpyA
lstrcmpA
WriteFile
TlsFree
SleepEx
Sleep
SetUnhandledExceptionFilter
RtlUnwind
ReadFile
RaiseException
InitializeCriticalSection
GetVersionExA
GetTimeFormatA
GetSystemTimeAsFileTime
GetStartupInfoA
GetPrivateProfileStringA
GetModuleHandleA
GetLocalTime
GetDateFormatA
GetCommandLineA
FindResourceA
ExitProcess
CloseHandle
Sections
.text Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ