Static task
static1
Behavioral task
behavioral1
Sample
f8361ac056673b424c4fe754916721a2_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f8361ac056673b424c4fe754916721a2_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f8361ac056673b424c4fe754916721a2_JaffaCakes118
-
Size
100KB
-
MD5
f8361ac056673b424c4fe754916721a2
-
SHA1
61deae19f087dd88ed3531a0328aa01e68122f5a
-
SHA256
28294db9bc0caa87ed5de28eef22dfbf4f10fd8b6a48831cd0ce7d2f72db4448
-
SHA512
fa373d9bac76385ed4704c630c149913cf691c282548a536907f384c51c1357f0b6da6427961ee4f54c53a3d79b4f6cd0c07bbe151d15635203dd526c569c799
-
SSDEEP
3072:Lq/rX0yIym999z+Ler4SMm89ogBOtpiXBAwZNv:Lqr9Iier1Mm89NO2Xjf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8361ac056673b424c4fe754916721a2_JaffaCakes118
Files
-
f8361ac056673b424c4fe754916721a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
a2f5e105e455b838c8d9b74f9927d15c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareStringA
CompareStringW
CreateMutexA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileSize
HeapAlloc
HeapCreate
HeapDestroy
InterlockedIncrement
IsBadReadPtr
LocalFree
LockResource
RtlUnwind
SetFilePointer
TlsFree
TlsGetValue
TlsSetValue
lstrcpyA
user32
CallWindowProcA
ClientToScreen
CloseClipboard
CreateWindowExA
EnableMenuItem
GetClassLongA
GetCursorPos
GetDC
GetDlgCtrlID
GetSysColorBrush
GetSystemMetrics
GetWindowTextLengthA
LoadCursorA
MapWindowPoints
ReleaseCapture
ReleaseDC
SendDlgItemMessageA
SetActiveWindow
Sections
CODE Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ