Static task
static1
Behavioral task
behavioral1
Sample
f5e1eaecc7c1fa6b68e858a82898aef3_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f5e1eaecc7c1fa6b68e858a82898aef3_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f5e1eaecc7c1fa6b68e858a82898aef3_JaffaCakes118
-
Size
58KB
-
MD5
f5e1eaecc7c1fa6b68e858a82898aef3
-
SHA1
9aaf25f9567e22260154909d07669840fa0378c2
-
SHA256
989d634a1f3fa0807ee75695ff07ff00371ad52cc29ba2065bd9ecb7df13439e
-
SHA512
b0210b5285b35ec575475181d03d88dddec0fb4a5704d858f95f62f998ea6348a74a90f0f96970c43b1fd6acde0f8538200458877aa6825494e1fc14dc89e167
-
SSDEEP
1536:F7hligalhWrS5jyDoIWKfycLRccbWEt09Zfad8X2:Fd/af7I5gK0nX2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5e1eaecc7c1fa6b68e858a82898aef3_JaffaCakes118
Files
-
f5e1eaecc7c1fa6b68e858a82898aef3_JaffaCakes118.dll windows:4 windows x86 arch:x86
1e72807d43e6539f9e0cffb73db910d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawIcon
DispatchMessageA
DialogBoxParamA
DestroyCursor
CreateMenu
CreateMDIWindowA
CreateDesktopW
CharUpperA
CharToOemA
CharNextA
CharLowerA
EndDeferWindowPos
BeginPaint
kernel32
lstrcpyA
lstrcatA
TlsFree
GetVersion
GetTimeFormatA
GetSystemTimeAsFileTime
GetCommandLineA
FreeResource
ExitThread
EnumResourceTypesA
EnumResourceLanguagesW
EnumResourceLanguagesA
lstrlenA
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE