Static task
static1
Behavioral task
behavioral1
Sample
073e912994a8e7bb9af3afc51a622b30_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
073e912994a8e7bb9af3afc51a622b30_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
073e912994a8e7bb9af3afc51a622b30_JaffaCakes118
-
Size
92KB
-
MD5
073e912994a8e7bb9af3afc51a622b30
-
SHA1
203f29bb6dc9760207f3ca7b13e11ed561a136ba
-
SHA256
69c9057ee93fa50074c2d79a4b2c54a91cb16608e61c6c7ce582a97ce5b543d0
-
SHA512
ce53a81261ec4f8471a8de23ad8209e00b3c88f5f4579b1e4e652c534e98990cdc887b7a0150821c323a0b2efe9d0b2c78fa82fbe5b6cd86f94d86a172e8fcf5
-
SSDEEP
1536:0AcfXsukTHmwQ3c1jtSir1n8J8xo3oP629FZKukSN/VZm5E+GZ6UX:pIcukTHRhSh4BFZKukSNdZmQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 073e912994a8e7bb9af3afc51a622b30_JaffaCakes118
Files
-
073e912994a8e7bb9af3afc51a622b30_JaffaCakes118.dll windows:4 windows x86 arch:x86
c969b1d51445fcc49c7007e164c935b3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
EnumResourceTypesA
ExitProcess
FindAtomA
GetACP
GetCommMask
GetCommandLineA
GetComputerNameExA
GetModuleHandleA
GetNamedPipeHandleStateW
GetPriorityClass
GetPrivateProfileSectionW
GetStartupInfoA
GetVersion
GetVersionExA
GlobalHandle
HeapAlloc
HeapCreate
IsBadStringPtrW
SetThreadPriority
SleepEx
TlsFree
TlsSetValue
VirtualFreeEx
WriteProcessMemory
user32
OffsetRect
LoadImageA
InvalidateRgn
GetScrollInfo
GetCapture
DestroyWindow
DefWindowProcA
CheckRadioButton
GetMenu
comctl32
LBItemFromPt
CreateStatusWindowA
FlatSB_SetScrollInfo
GetEffectiveClientRect
ImageList_BeginDrag
ImageList_Create
ImageList_DragLeave
ImageList_Draw
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIcon
ImageList_SetFlags
InitCommonControlsEx
dbghelp
SymGetSymFromName
ImageDirectoryEntryToData
SymFunctionTableAccess64
oleaut32
VarBstrCmp
SysFreeString
SafeArrayAllocData
SafeArrayAccessData
RevokeActiveObject
OleLoadPicture
ClearCustData
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ