Static task
static1
Behavioral task
behavioral1
Sample
1a8e0edd92751930f96f6bfec317c423_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a8e0edd92751930f96f6bfec317c423_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1a8e0edd92751930f96f6bfec317c423_JaffaCakes118
-
Size
316KB
-
MD5
1a8e0edd92751930f96f6bfec317c423
-
SHA1
de6d309200e158d4a11d2e1dea67699076d7a8e5
-
SHA256
97f07d25ab0530af72622ca89dc4d52961527489e2a9eb84757a9fdbafbec915
-
SHA512
4e3840da83d4d3981fc9b5a2508c2f2fd3afc7888880bcdbc00cf7165ab8ffd31f8e8f7fc9afdbaea47e3e0b68ce1625e6aca3d3a6c5f9d08137ccec859d350d
-
SSDEEP
6144:anJHlt/lI4RR+LHlfmhcMivQ7Jq8wjGwqNh7KAgckPfiTdsFwhVc5fbd2:aJHlXInxmKMivMnnthcH2sFOO5B2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a8e0edd92751930f96f6bfec317c423_JaffaCakes118
Files
-
1a8e0edd92751930f96f6bfec317c423_JaffaCakes118.dll windows:4 windows x86 arch:x86
0ca027c656b2406a858b1c2f6e611548
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawCaption
DrawIcon
DestroyIcon
DrawStateA
EnableMenuItem
EnableWindow
GetCursor
CreateMenu
CreateCursor
CopyRect
CopyImage
CharPrevA
CharLowerA
DrawMenuBar
ChangeMenuA
kernel32
TlsSetValue
SetEndOfFile
OpenFileMappingA
OpenFile
GetTimeFormatA
FreeResource
lstrcmpiA
Sections
.text Size: 69KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ