GetObjectData
Static task
static1
Behavioral task
behavioral1
Sample
082d2deddbed09c1ebe146260e82276f_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
082d2deddbed09c1ebe146260e82276f_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
082d2deddbed09c1ebe146260e82276f_JaffaCakes118
-
Size
220KB
-
MD5
082d2deddbed09c1ebe146260e82276f
-
SHA1
bc5879a6a015c17c18ec12fc3f120b43fcd5fdd0
-
SHA256
98f2012b994c77889fc8b0876b924bb5e94906597bf4033de651f0bc87d6f6ba
-
SHA512
fd113f5df2be8e4312fc8e329b3411272ada89b8a1d8ce113de120b0a075a71561063e38ce99052a9e86c25e09863603ed008323749d5ec29ae7efca8c62125b
-
SSDEEP
6144:5FyEnRjGlOA5l7WsbvYOp1m8DcA8s3a/eNrnNzlk:5NnBGll5l77w81pcAPK/KZu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 082d2deddbed09c1ebe146260e82276f_JaffaCakes118
Files
-
082d2deddbed09c1ebe146260e82276f_JaffaCakes118.dll windows:4 windows x86 arch:x86
46bf2bf3cd5c03654d47baad4255014c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileMappingA
ExitProcess
ExpandEnvironmentStringsA
FreeEnvironmentStringsA
GetCommandLineA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetLocaleInfoW
GetModuleHandleA
GetProcAddress
GetStringTypeW
GetThreadContext
GetVersionExA
GlobalAddAtomA
HeapAlloc
HeapCreate
InterlockedExchange
IsBadStringPtrA
LCMapStringA
OpenProcess
UnhandledExceptionFilter
WaitForMultipleObjects
lstrcpyA
advapi32
AdjustTokenGroups
BuildImpersonateTrusteeA
ConvertSecurityDescriptorToAccessNamedA
RegConnectRegistryA
SetSecurityDescriptorRMControl
user32
GetWindow
GetWindowRect
GetWindowTextA
InsertMenuA
InvalidateRgn
IsDialogMessageA
GetPropA
RegisterClassA
SetTimer
SetUserObjectSecurity
SetWindowPlacement
SystemParametersInfoA
GetMenu
GetCapture
DrawMenuBar
FillRect
DispatchMessageA
PostQuitMessage
CreatePopupMenu
ole32
CoInitializeSecurity
CoGetStdMarshalEx
IsEqualGUID
ddraw
DDInternalLock
DSoundHelp
Exports
Exports
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ