Static task
static1
Behavioral task
behavioral1
Sample
1805998518b5144df0c1e955404ba365_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1805998518b5144df0c1e955404ba365_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1805998518b5144df0c1e955404ba365_JaffaCakes118
-
Size
64KB
-
MD5
1805998518b5144df0c1e955404ba365
-
SHA1
68116ef6fc02a92985bfde61271fe4a932fd851c
-
SHA256
76132cdd217f44c6e115243f3f15463f033ca8ff3c5967a421c6e94b11616204
-
SHA512
f0c189aa6f27d4b0cad3114246396949df5e4ceb6b13c54dba4a711dfcb0378e9ec084561e5140e83f4ccd0957bdfd524aad4d9ed045e8edd1e6b2f9cc9cbb76
-
SSDEEP
1536:7Sa0lntIOS7T1cAhX/SYXsZ3UxKxdECFDp6:ea0wOWT1cgXuk2hFDp6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1805998518b5144df0c1e955404ba365_JaffaCakes118
Files
-
1805998518b5144df0c1e955404ba365_JaffaCakes118.dll windows:4 windows x86 arch:x86
68c1584fba56287c7c4b6945313f28f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareFileTime
FreeEnvironmentStringsW
FreeResource
GetCPInfo
GlobalHandle
HeapAlloc
HeapCreate
LCMapStringA
LockFile
MulDiv
MultiByteToWideChar
ReadFile
ResetEvent
VirtualProtect
lstrlenW
user32
CopyRect
CreateWindowExA
DrawIcon
EnableMenuItem
GetMessageA
GetSubMenu
GetSysColor
GetWindowRect
MessageBoxA
ModifyMenuA
PostMessageA
RegisterClassA
RegisterWindowMessageA
SetActiveWindow
SetForegroundWindow
Sections
CODE Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 1024B - Virtual size: 846B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ