Static task
static1
Behavioral task
behavioral1
Sample
23c2b496e0ec94a68b6e4ef8b7f4a12b_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
23c2b496e0ec94a68b6e4ef8b7f4a12b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
23c2b496e0ec94a68b6e4ef8b7f4a12b_JaffaCakes118
-
Size
303KB
-
MD5
23c2b496e0ec94a68b6e4ef8b7f4a12b
-
SHA1
254e468f17ec8a72c36ea659ab8af1c04d70b86a
-
SHA256
10b5cfe1a6d20d536317962612042593d1a2255bf7e5b4518f95ccc7cd500447
-
SHA512
b74a1c84c25d3f62476c56ce3da04bc5aeee02511816293001168c36fa3d3673825bf17cfaa737e03400a70fd1bcb2497a1f09f19fcc946d84f662fd59afe1d8
-
SSDEEP
6144:B6/C9InHic+cfNI25Bzzlv5sNhShaXtk24vufABnnR+ZUNnXM1M:M/pD/rsNohMpfABEAXt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23c2b496e0ec94a68b6e4ef8b7f4a12b_JaffaCakes118
Files
-
23c2b496e0ec94a68b6e4ef8b7f4a12b_JaffaCakes118.dll windows:4 windows x86 arch:x86
f40f76c4248ef48795bcb7156ed94b5a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawTextA
EnableWindow
DialogBoxParamA
EndDialog
EndPaint
DestroyCaret
DefDlgProcA
CreateDesktopW
CreateCursor
CreateAcceleratorTableA
CopyRect
CopyImage
CharToOemA
EndDeferWindowPos
CharPrevA
kernel32
lstrcatA
VirtualAlloc
RaiseException
LoadResource
GetCommandLineA
EnumResourceTypesA
EnumResourceNamesA
CloseHandle
lstrcpynA
Sections
.text Size: 55KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ