Static task
static1
Behavioral task
behavioral1
Sample
ffe0873f55cf6b5644350014bf624230_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffe0873f55cf6b5644350014bf624230_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ffe0873f55cf6b5644350014bf624230_JaffaCakes118
-
Size
32KB
-
MD5
ffe0873f55cf6b5644350014bf624230
-
SHA1
a00be8270a48875c6fb6ad191788f644ce2e29d2
-
SHA256
2935b1a1a3bacc4334026e0da8c9603d88e52e411384bfc86bb10a915f389fd6
-
SHA512
678440ca654d422962e5967f65b6060eb767fa80fc62f2c8b68a8c7fdffa8efecec88d17d195f9f00114f6cf3251d01b8a553de09a88250590a8336eb4ac7604
-
SSDEEP
768:l21gGJcDrd2v4vuB8dNiYzuWhoDESCDHMdSeS/WPGOZ:81gAcDmabPiMxHa6/6Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffe0873f55cf6b5644350014bf624230_JaffaCakes118
Files
-
ffe0873f55cf6b5644350014bf624230_JaffaCakes118.dll windows:4 windows x86 arch:x86
d67eecd95bd47346e19151e06cf6b491
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
BeginPaint
CheckMenuRadioItem
CopyIcon
DestroyIcon
GetDesktopWindow
LoadIconA
SetWindowLongA
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage
UpdateWindow
ValidateRect
WaitMessage
wvsprintfA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 17KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE