Static task
static1
Behavioral task
behavioral1
Sample
155b80668242b50d7100dc8ef2a64c81_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
155b80668242b50d7100dc8ef2a64c81_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
155b80668242b50d7100dc8ef2a64c81_JaffaCakes118
-
Size
86KB
-
MD5
155b80668242b50d7100dc8ef2a64c81
-
SHA1
35fab1b9916b673fc55bc1892f14687589c60559
-
SHA256
d20d4325b02746c166d44d663a6143a0742a0b49d4e5d4ec2f8b0cb4dbc967a4
-
SHA512
d6d424fe7541b3b85fb3e64c6a086613816045c930286958b2fcebd75b6028164afaea3094caaa1ecc2f8c5f15630fe6fd649d50c88c84e1089621116a45efb6
-
SSDEEP
1536:bq+dX5z9lhsRbarmsapZyWK+0IStWJ+xruajIDUsL+JjiHq0VaO1FsPRFDmu+Tm:bbdRhsRwmsmB4tCailUsLHq0VaODQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 155b80668242b50d7100dc8ef2a64c81_JaffaCakes118
Files
-
155b80668242b50d7100dc8ef2a64c81_JaffaCakes118.dll windows:5 windows x86 arch:x86
ae372eb903cd64eb97ddf1c8af7f439b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathBuildRootA
PathAppendW
PathBuildRootW
user32
MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE