Behavioral task
behavioral1
Sample
240f8ea6abc6ce23f8c0c581436e0d13_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
240f8ea6abc6ce23f8c0c581436e0d13_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
240f8ea6abc6ce23f8c0c581436e0d13_JaffaCakes118
-
Size
146KB
-
MD5
240f8ea6abc6ce23f8c0c581436e0d13
-
SHA1
fab10684f6b09580e111263f57d301990f320611
-
SHA256
703d569b78ce8f34bdd7fefe9942073b2950e36faf57620ac42da4c8e0bb4f39
-
SHA512
9cd95c17756b67f4ea589b3ef64fc3d0a2d6720746fd8efaef20d0033c1d0b811cb27efd45e135d743ffa9889d146b02e03b433e0ab4311789e040a6c9ad0623
-
SSDEEP
3072:JmPmy4MAw66Gf1DUHyf8zejPuq4h4c1lCQM9RWUCpVd:JmFhN6/t0yf9LD4hVS1Cp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 240f8ea6abc6ce23f8c0c581436e0d13_JaffaCakes118
Files
-
240f8ea6abc6ce23f8c0c581436e0d13_JaffaCakes118.dll windows:4 windows x86 arch:x86
4b23b38cba768a96c68b0663113ae389
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareStringA
ExitThread
GetLastError
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTime
GetTimeFormatA
GetVersion
InitializeCriticalSection
RaiseException
RtlUnwind
SetCurrentDirectoryA
SetEndOfFile
SetLastError
TlsSetValue
VirtualAlloc
lstrcatA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
user32
ActivateKeyboardLayout
BeginPaint
ChangeMenuA
CharToOemBuffA
CopyRect
CreatePopupMenu
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamA
DrawIcon
DrawMenuBar
EnableWindow
EndDialog
EndMenu
GetDlgItem
GetFocus
IsCharLowerA
IsCharUpperA
LoadAcceleratorsW
SetCursor
Sections
UPX0 Size: 1024B - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.protect Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE