Static task
static1
Behavioral task
behavioral1
Sample
2470fabd4d108160bc3053b4da286e83_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2470fabd4d108160bc3053b4da286e83_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
2470fabd4d108160bc3053b4da286e83_JaffaCakes118
-
Size
61KB
-
MD5
2470fabd4d108160bc3053b4da286e83
-
SHA1
f09b1fe616b9e33a6320da5e7928eb61b7dcfd2a
-
SHA256
00081afb9d66e8d52e3b03f2d18ff5f871171f43e6e69a4dbd9bff58915ca27a
-
SHA512
5119245b4966b63c33032ad09db45dcbe305e2000df491dd7e44c21bdaca63191b4d8c7ac70c0b385227589ab20b2b47f71157fd46c2a1639cfc9eeae62e730a
-
SSDEEP
1536:eEcK7TFi/Ix8K5po/Qzx/S9a947VgxBymSpq+8Na:em7+mq/Qz9S977VLRq+84
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2470fabd4d108160bc3053b4da286e83_JaffaCakes118
Files
-
2470fabd4d108160bc3053b4da286e83_JaffaCakes118.dll windows:4 windows x86 arch:x86
5b62618dc9b09da7cdc2f22b5ca39136
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
LocalAlloc
LocalFree
lstrcmpiW
lstrlenW
FreeLibrary
GetProcAddress
LoadLibraryW
GlobalUnlock
GetModuleHandleA
TerminateProcess
GetCommandLineA
SetUnhandledExceptionFilter
GetWindowsDirectoryW
GetModuleHandleW
UnhandledExceptionFilter
GetLocaleInfoA
GetLocalTime
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError
GetCurrentProcess
VirtualProtect
user32
MessageBoxW
SetWindowLongW
SendMessageW
EnableWindow
GetDlgItem
CheckDlgButton
SetFocus
WinHelpW
LoadStringW
GetWindowLongW
IsDlgButtonChecked
SendDlgItemMessageW
ShowWindow
GetParent
advapi32
RegCloseKey
ole32
ReleaseStgMedium
msvcrt
_adjust_fdiv
malloc
_initterm
_vsnprintf
memset
memcpy
atoi
_XcptFilter
free
_amsg_exit
_vsnwprintf
_except_handler3
time
localtime
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ