Static task
static1
Behavioral task
behavioral1
Sample
f54fead5bd9686b7cae66e98abc08394_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f54fead5bd9686b7cae66e98abc08394_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f54fead5bd9686b7cae66e98abc08394_JaffaCakes118
-
Size
31KB
-
MD5
f54fead5bd9686b7cae66e98abc08394
-
SHA1
8fe6c6af66488dadf5d518b809ec2f166e711396
-
SHA256
a717f958921cb990583bf6b2cc3fc9356f81de506817e64e18636a7ebb6001b4
-
SHA512
f8cdb3844c95aa9b0adae5dbecfa93a180fc3b7c7e3823f2f60641f704dacc348ba846b7603847f5244675aa6749838707978c030b6862986d5fb9c0190b921b
-
SSDEEP
384:blLU44nwgycRejM9kM/P3IdulSaxJYRQve59HC5npRJRfGe7uSUvqPvDai:FU44nV5WK/vtise5YpxfN7LUvqjv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f54fead5bd9686b7cae66e98abc08394_JaffaCakes118
Files
-
f54fead5bd9686b7cae66e98abc08394_JaffaCakes118.dll windows:4 windows x86 arch:x86
c1f1e34f64b4dfa3605997a278f962ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CopyIcon
DestroyIcon
GetCursorPos
GetDC
GetDesktopWindow
GetSystemMetrics
GetWindow
GetWindowDC
LoadIconA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ