Static task
static1
Behavioral task
behavioral1
Sample
228fdeba51b5eb99f848fb8d509e84cd_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
228fdeba51b5eb99f848fb8d509e84cd_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
228fdeba51b5eb99f848fb8d509e84cd_JaffaCakes118
-
Size
88KB
-
MD5
228fdeba51b5eb99f848fb8d509e84cd
-
SHA1
5a7d8336279837d83b6b7d3134393d7aa390df56
-
SHA256
49d43c32ccccad50ba0cccbf78fba6a71f88d5a2f832350d7c081dbcc5d244dd
-
SHA512
6794be854a4be54f9a2d0c14585cd41eaf5e6699a9dc1761493dc8bbfec60c8b05529285298758103d03e91e1df68e35c1c20cb6550685d8ea46c48c3c5ca59c
-
SSDEEP
1536:8H1JTTU8QY1JpqhDcEfJEXuXS/ZMd0s63eC7wLA79yOhtUj/z/+QoeulWXW3IRXM:8vTTzQ1hDcExEiS/Za05XP9ynjL/kN+y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 228fdeba51b5eb99f848fb8d509e84cd_JaffaCakes118
Files
-
228fdeba51b5eb99f848fb8d509e84cd_JaffaCakes118.dll windows:4 windows x86 arch:x86
8fba4ddcb248a65db63666555a1c9dbb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
ChooseColorA
ChooseColorW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
dwOKSubclass
WantArrows
GetOpenFileNameA
GetOpenFileNameW
LoadAlterBitmap
PrintDlgA
ReplaceTextW
user32
DialogBoxParamA
EnumWindows
GetDesktopWindow
GetUserObjectSecurity
ScreenToClient
SendMessageA
kernel32
HeapCreate
GetDevicePowerState
GetCommandLineA
GetACP
ExpandEnvironmentStringsA
ExitProcess
EnumSystemLocalesW
EnumLanguageGroupLocalesW
CreateWaitableTimerW
CloseHandle
CallNamedPipeW
GetModuleHandleA
SetSystemPowerState
SetComputerNameA
RtlMoveMemory
LCMapStringA
GetStartupInfoA
HeapAlloc
GetVersionExA
GetLogicalDrives
ole32
StringFromGUID2
CoCreateInstance
CLSIDFromString
dbghelp
FindDebugInfoFileEx
ImageNtHeader
ImageRvaToVa
MapDebugInformation
SymEnumSourceFiles
SymFromAddr
SymGetLineFromAddr64
SymGetLinePrev64
SymGetSymFromAddr
SymGetSymPrev
SymGetTypeFromName
SymMatchString
SymSetOptions
UnmapDebugInformation
ImageDirectoryEntryToData
comctl32
CreateStatusWindowA
DestroyPropertySheetPage
DrawInsert
FlatSB_SetScrollInfo
ImageList_DrawEx
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_Merge
ImageList_SetFilter
UninitializeFlatSB
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ