Static task
static1
Behavioral task
behavioral1
Sample
14b05d45a98f7b1d27828c5fcda6f037_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
14b05d45a98f7b1d27828c5fcda6f037_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
14b05d45a98f7b1d27828c5fcda6f037_JaffaCakes118
-
Size
86KB
-
MD5
14b05d45a98f7b1d27828c5fcda6f037
-
SHA1
a01204c88a9ecb58b178644d45175e769c8c5095
-
SHA256
e85f9ae3d87f06a8cc95d02d07febe723e67e3b8acb0ff00e805d0594b1f94e1
-
SHA512
1655aaa33b94074a2747a3be1548d40e44d01f3108af7557f91e8e7643bc734fb7c76fa986b63619469146059942cdb390c21a5aba7bc878b602dcf428659042
-
SSDEEP
1536:UbrfWRvVMSdpdJt+xLAL4jH2t5JGJhXHk/sFc4fzRkjmyIo6631LI4:UbmaSdpdyWt5JeHYsFcKRPyI03Jp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14b05d45a98f7b1d27828c5fcda6f037_JaffaCakes118
Files
-
14b05d45a98f7b1d27828c5fcda6f037_JaffaCakes118.dll windows:5 windows x86 arch:x86
ae372eb903cd64eb97ddf1c8af7f439b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathBuildRootA
PathAppendW
PathBuildRootW
user32
MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE