Static task
static1
Behavioral task
behavioral1
Sample
23d2877cd01c27a256beeca1cba4812f_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23d2877cd01c27a256beeca1cba4812f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
23d2877cd01c27a256beeca1cba4812f_JaffaCakes118
-
Size
36KB
-
MD5
23d2877cd01c27a256beeca1cba4812f
-
SHA1
46883dd99a6ccde47d485426094a7fd842684717
-
SHA256
bf324ff0837a1cfd7a81a2a4bd899e93360355006fc28d74612f2332075a7353
-
SHA512
8958067f6382302aa41288a2091b385d335711e9adbc9bba1d66bd80141066f87735c05b25240ab0bb75a65e7c269b0f72f1564654fb7e86815a78b7f61ce676
-
SSDEEP
768:D2P8c9cam3ja5SVRYB/8v3gGHzo+cmbHPIt6k4Z:/c/m3jaAVRYB/q3gGTo+5vIt9M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23d2877cd01c27a256beeca1cba4812f_JaffaCakes118
Files
-
23d2877cd01c27a256beeca1cba4812f_JaffaCakes118.dll windows:4 windows x86 arch:x86
7f1e4f1ec9e337450d7880773f5fa3e9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
MulDiv
GetLocalTime
GetProcAddress
VirtualProtect
DosDateTimeToFileTime
GetModuleFileNameA
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GetACP
LoadLibraryA
GetVersionExA
Sleep
IsDebuggerPresent
GetComputerNameA
IsBadWritePtr
VirtualAlloc
user32
GetTopWindow
GetWindow
GetTitleBarInfo
CopyIcon
WindowFromDC
IsClipboardFormatAvailable
GetCursor
GetMenuContextHelpId
GetWindowContextHelpId
GetWindowTextLengthA
IsIconic
GetGUIThreadInfo
GetWindowPlacement
IsChild
IsMenu
BlockInput
GetWindowRgn
GetWindowTextA
GetWindowDC
advapi32
GetUserNameA
IsValidAcl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
RevertToSelf
msvcrt
_CIfmod
_itoa
__doserrno
_adjust_fdiv
malloc
_initterm
free
memchr
srand
_set_error_mode
_CIacos
time
localeconv
_pctype
_isctype
__mb_cur_max
modf
_errno
ldiv
gdi32
GetPixel
GetBkColor
GetBkMode
GetBitmapDimensionEx
GetStretchBltMode
ole32
CoGetCurrentProcess
CoDosDateTimeToFileTime
CoRevertToSelf
shell32
ord680
ord524
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ