Static task
static1
Behavioral task
behavioral1
Sample
24823e82aca46a10c2a7a6f28ac7aaf1_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
24823e82aca46a10c2a7a6f28ac7aaf1_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
24823e82aca46a10c2a7a6f28ac7aaf1_JaffaCakes118
-
Size
69KB
-
MD5
24823e82aca46a10c2a7a6f28ac7aaf1
-
SHA1
db150bb8bf7b796c7f2568fee6859de9f95895dd
-
SHA256
913256eee5d705eb8f333e52dbff1db439aae254e4199a3259c3794e0e4e2593
-
SHA512
28ef724e190f8805aa8a03deb957899cbf2d868e8e49ee1b90e227f8760035236a7a41d66eb3dfe76f8e98d6f166644e767c44140885432490334f9ee5460639
-
SSDEEP
1536:ze5bTVHXbu7wsQ5un2Umwe4ODRQo7Lvz49Z9Zzzo:zAtHXq8sUun2UPe/RQ8Lbw9J8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24823e82aca46a10c2a7a6f28ac7aaf1_JaffaCakes118
Files
-
24823e82aca46a10c2a7a6f28ac7aaf1_JaffaCakes118.dll windows:4 windows x86 arch:x86
a976dedfbf38cc3665fe0bca635cd64a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetDateFormatA
GetModuleHandleA
GetStdHandle
GlobalHandle
GlobalUnlock
HeapAlloc
HeapCreate
HeapSize
LCMapStringA
MulDiv
SetFilePointer
UnhandledExceptionFilter
VirtualFree
lstrcpyA
lstrlenW
user32
CallNextHookEx
CharUpperA
ClientToScreen
EqualRect
GetKeyState
GetMenuCheckMarkDimensions
GetParent
GetPropA
GetWindowDC
IsDialogMessageA
IsRectEmpty
IsWindow
KillTimer
LoadBitmapA
PeekMessageA
ReleaseCapture
SendDlgItemMessageA
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ