Static task
static1
Behavioral task
behavioral1
Sample
1c0ea3306fe2328e59a88a653c465af5_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c0ea3306fe2328e59a88a653c465af5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1c0ea3306fe2328e59a88a653c465af5_JaffaCakes118
-
Size
261KB
-
MD5
1c0ea3306fe2328e59a88a653c465af5
-
SHA1
dda6c56e1fb128dd92c4c1e91e725e9f9b585208
-
SHA256
abe9f9736e6fda886aa634c3c3690f932bc7b9c73a8e7645a6fa580d9918a747
-
SHA512
afca5f9ea57eeca662f96084876ae1bd1d1ecb7870fe45708748e6925dfe5c51bca3809eb30205dfecdbd93bc913fca0a914032e74c5161f829a4ad381b69675
-
SSDEEP
6144:ZdK6R3EzUF+kYvmFyewM5g1cOW93zZRfP5DJrk2xz:66RRFBYvsPn3xNRfFJRxz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c0ea3306fe2328e59a88a653c465af5_JaffaCakes118
Files
-
1c0ea3306fe2328e59a88a653c465af5_JaffaCakes118.dll windows:4 windows x86 arch:x86
3536439f913eeffacd27dfc43cd7bd36
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowCaret
SetMenuInfo
SetFocus
LoadBitmapA
EndMenu
EnableMenuItem
DrawTextA
DrawMenuBar
DialogBoxParamA
DestroyIcon
DestroyCaret
CharPrevA
BeginPaint
kernel32
GetSystemTime
SleepEx
SetLastError
SetEndOfFile
RtlUnwind
OpenFileMappingA
OpenFile
LocalAlloc
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
CloseHandle
EnumResourceLanguagesW
FindResourceA
FlushFileBuffers
GetDateFormatA
GetFileSize
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersion
TlsFree
oleaut32
ClearCustData
GetErrorInfo
OleIconToCursor
OleLoadPicture
OleTranslateColor
RegisterTypeLib
SafeArrayAccessData
Sections
.text Size: 16KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 240KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ