Static task
static1
Behavioral task
behavioral1
Sample
0299e68489f836addf1b7195e3a949f3_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0299e68489f836addf1b7195e3a949f3_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0299e68489f836addf1b7195e3a949f3_JaffaCakes118
-
Size
38KB
-
MD5
0299e68489f836addf1b7195e3a949f3
-
SHA1
985efdb06329cfe4d38aa8278fc699c277db7235
-
SHA256
0a8376a2bf119fd4b37d4609482086203de89a1def0c13612cdf3fef60249082
-
SHA512
b86e536f49932c97007172dd7e159e7e0c71f6b8de0dc2bb8ee5c1f9e18ba6be0a5de91b84a914aeedd1f27aa411f5ceb3da516b7f686306e3c04bba1290cc0d
-
SSDEEP
768:pgqwEiXlUGItq7eMqWajFKN0xCwZUQXUgP9cwrXc3ddehzywildJY:pgq+1Uy7Tqb3XUIFrJhqde
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0299e68489f836addf1b7195e3a949f3_JaffaCakes118
Files
-
0299e68489f836addf1b7195e3a949f3_JaffaCakes118.dll windows:4 windows x86 arch:x86
88fc5a6acb4204af3d8af9d0cc71153c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawStateA
EnableMenuItem
EndDialog
GetCursor
GetDC
DestroyIcon
MessageBoxA
MessageBoxIndirectA
OemToCharBuffA
RegisterClassA
ShowCaret
DestroyCaret
DeleteMenu
CreatePopupMenu
CreateDialogParamA
CopyImage
CharUpperBuffA
CharPrevA
ChangeMenuA
LoadMenuA
wsprintfA
kernel32
VirtualAlloc
Sleep
GetVersion
FreeResource
ExitProcess
EnumResourceLanguagesW
EnumResourceLanguagesA
CloseHandle
lstrcmpA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE