Static task
static1
Behavioral task
behavioral1
Sample
14cb5460ed848fac10b08e15a51b1677_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14cb5460ed848fac10b08e15a51b1677_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
14cb5460ed848fac10b08e15a51b1677_JaffaCakes118
-
Size
45KB
-
MD5
14cb5460ed848fac10b08e15a51b1677
-
SHA1
ddf429d6949f5bb7a33fa4dea455ed640602c5d9
-
SHA256
d23cdfaf509b81c28c7cf95707dfdba5bc224138b3b7eb4d3e6044b80be978fd
-
SHA512
a87362ed3b931a646fba578fe501aa14b0b874db0a01987189cca2d1d644838b08e9793ba48ef51d7de0bfe4f864cdc71ffd7dec1767b70bb35d07b4e7449d40
-
SSDEEP
768:RZAUAJ5AAdwXBEAk7BVFShLaweZ1M7TwlnModYQW7J5pvT/T9CUhQ3Qm:RZ9XBERBVwY1XMUYQW7Hp9CUhQ3x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14cb5460ed848fac10b08e15a51b1677_JaffaCakes118
Files
-
14cb5460ed848fac10b08e15a51b1677_JaffaCakes118.dll windows:4 windows x86 arch:x86
418663e1916b4252aee3e1ce5c9575c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvbvm60
__vbaCySub
__vbaExitProc
__vbaCyAbs
user32
ActivateKeyboardLayout
CharUpperA
DrawMenuBar
EndPaint
LoadCursorFromFileA
LoadMenuA
SetCursor
ShowWindow
kernel32
lstrcmpA
GetDateFormatA
EnumResourceLanguagesW
GetModuleHandleA
SetCurrentDirectoryA
Sleep
lstrlenA
GetFileSize
TlsSetValue
dinput
DirectInputCreateW
ole32
CreateFileMoniker
OleUninitialize
OleSetClipboard
OleInitialize
OleFlushClipboard
GetRunningObjectTable
CreateDataAdviseHolder
CoTaskMemRealloc
CLSIDFromProgID
CLSIDFromString
CoRegisterMessageFilter
CoTaskMemAlloc
ReleaseStgMedium
oleaut32
SystemTimeToVariantTime
VarFormatNumber
VarI1FromStr
VarI2FromDec
VarR8FromCy
VarUI1FromUI2
SafeArrayAccessData
Sections
.text Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ