Static task
static1
Behavioral task
behavioral1
Sample
0ff3d486a14e396767a62369aaef4ecd_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ff3d486a14e396767a62369aaef4ecd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0ff3d486a14e396767a62369aaef4ecd_JaffaCakes118
-
Size
50KB
-
MD5
0ff3d486a14e396767a62369aaef4ecd
-
SHA1
e4201dbd9a0c3fd4a5ff6cb1d9dc1aab8c4cdfe9
-
SHA256
4092b72936311ab60972ddd1f7462115fa996699cd67eaa5b1056ab0580dd6b2
-
SHA512
ff69e4357ab812fc7120ebfba6cf7d8991eee0de99a3aa03d444301240d18597dfe93216be6e9e5f8e515e5ba08820e099e5713e74b5df6b9f5bc5b181b8d149
-
SSDEEP
768:zw+Wq3GO9hNUNKCJmCLPPfxr0M5V7aO5ObxFhKzuP01wYaJman1Um+c8n:zw+WAGMUTfxrv5VGO4louP0IP1Cn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff3d486a14e396767a62369aaef4ecd_JaffaCakes118
Files
-
0ff3d486a14e396767a62369aaef4ecd_JaffaCakes118.dll windows:5 windows x86 arch:x86
c20711ed681eeb1a7212f563b3be6ced
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathAppendW
PathBuildRootW
user32
MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE