Static task
static1
Behavioral task
behavioral1
Sample
fc5e54a1a849c9b9534b02484ffa1565_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fc5e54a1a849c9b9534b02484ffa1565_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fc5e54a1a849c9b9534b02484ffa1565_JaffaCakes118
-
Size
102KB
-
MD5
fc5e54a1a849c9b9534b02484ffa1565
-
SHA1
11de25f4a602b24a17fd02020544358ffa8e556b
-
SHA256
df7bb9439060827d9fd032fb0f53ce9d9090c7e8d971779dbea15ecd3c2728bc
-
SHA512
1722f53e5a74e1bcac95a7e9d43fd50058b25daf50d278fc0db87f0d281dbb97908c54ef7b08f55f1eb955ed6478b22952bc7708f2f659a2e6ed74352becb5f7
-
SSDEEP
3072:VoHEZ21Uiv2iXR1ISOnwuJ0QVrJ/Sz3Hgl:VzcSiaS9Y07zXY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc5e54a1a849c9b9534b02484ffa1565_JaffaCakes118
Files
-
fc5e54a1a849c9b9534b02484ffa1565_JaffaCakes118.dll windows:4 windows x86 arch:x86
52948b2d7dcf3f4adb2cc882933d5344
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowOwnedPopups
GetMessageA
EqualRect
DialogBoxParamA
CreateMDIWindowA
kernel32
TlsFree
lstrcpynA
lstrcmpA
VirtualAlloc
TlsGetValue
TlsAlloc
EnumResourceLanguagesA
GetVersionExA
LoadLibraryA
MapViewOfFile
SetEndOfFile
oleaut32
RegisterTypeLib
SafeArrayCreate
SysReAllocString
SysStringLen
OleTranslateColor
ClearCustData
Sections
.text Size: 26KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ