Static task
static1
Behavioral task
behavioral1
Sample
16c7fd98e73be74f209f32630f325683_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
16c7fd98e73be74f209f32630f325683_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
16c7fd98e73be74f209f32630f325683_JaffaCakes118
-
Size
86KB
-
MD5
16c7fd98e73be74f209f32630f325683
-
SHA1
00a886b50544d32e9769c9e507204fd806167988
-
SHA256
0a1144b966fb997cb21e06099acff9e4fbaebe334b917053e01049cbca25299c
-
SHA512
d3eba7ffd5cd408ffe3b95a2652a529df7c508ef0d3ca4cfb6dc7e8cb337773e273028795b0fa8ee30754d7c05bb53ea4968cb7ac64923ade4a20e3eb51383bf
-
SSDEEP
1536:3nbB9uKA9jD2c5xn8I7PtVbdk18gNd/5hpwygdB0gVfs5STIooNTIplY:LB9FA9uqx8IBVhkugNp5zednySMooepe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16c7fd98e73be74f209f32630f325683_JaffaCakes118
Files
-
16c7fd98e73be74f209f32630f325683_JaffaCakes118.dll windows:5 windows x86 arch:x86
ae372eb903cd64eb97ddf1c8af7f439b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathBuildRootA
PathAppendW
PathBuildRootW
user32
MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE