Static task
static1
Behavioral task
behavioral1
Sample
0314c00b52be53c8d65b42e11de60356_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0314c00b52be53c8d65b42e11de60356_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0314c00b52be53c8d65b42e11de60356_JaffaCakes118
-
Size
58KB
-
MD5
0314c00b52be53c8d65b42e11de60356
-
SHA1
0cdc497624f986986413f4d416c2b0a653e30f75
-
SHA256
6f2d1f64b55216dc96d7e8c19d2d9155bf324be4957e8bad47456565a33b6cf9
-
SHA512
1ac542778f755198463d78902ed6fd473d367a729913be20a5a4e762df5760bc6dad8a829f842912b0f682e35777462cfa3385caf947aa871ee672c10b25714f
-
SSDEEP
768:J8NPfVlmvdDQO1sCjSbEcM1z8Qh9nk+hz3u+8xKPrT+GtrhzmEbUWAlW6cSY:JOnyKolmbUgInk+hK+TrTfvzmEbBAlDY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0314c00b52be53c8d65b42e11de60356_JaffaCakes118
Files
-
0314c00b52be53c8d65b42e11de60356_JaffaCakes118.dll windows:4 windows x86 arch:x86
42a7eee39c86bdbd05ce4a5a92c93623
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawIcon
DestroyCursor
DestroyCaret
DefDlgProcA
CreateMDIWindowA
CreateIconFromResourceEx
CreateIcon
CreateDialogParamA
CreateDialogIndirectParamA
CreateDesktopW
CreateDesktopA
CopyRect
CharUpperBuffA
CharToOemA
CharLowerA
kernel32
EnumResourceTypesA
lstrcpyA
lstrcmpiA
lstrcmpA
VirtualAlloc
UnmapViewOfFile
TlsFree
SleepEx
SetEndOfFile
RtlUnwind
ReadFile
MapViewOfFile
LoadLibraryA
InitializeCriticalSection
GetVersionExA
GetLocalTime
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE