Static task
static1
Behavioral task
behavioral1
Sample
26005a499650cdcb5a7c6ad1efa324f3_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26005a499650cdcb5a7c6ad1efa324f3_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
26005a499650cdcb5a7c6ad1efa324f3_JaffaCakes118
-
Size
28KB
-
MD5
26005a499650cdcb5a7c6ad1efa324f3
-
SHA1
017fa91078901226d9d4788b9f7a79cce2cb06e4
-
SHA256
3cfd3a3a2f4ce7e2384d331f34929cee534f88eaa3f04147b314169053ba6a00
-
SHA512
1124e2a89cbca0c91b997f76eb1e9fb890ccdb599d916299237e65fb18e72e74020146fad0e07497417197ace5d285666d00a11d16daada403bc8018f9c6588d
-
SSDEEP
768:cq3dpEH4ojMad4pcv7T8UtRW2qLuX2vXPp3b:FdpeL4KvX8129X2v/p3b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26005a499650cdcb5a7c6ad1efa324f3_JaffaCakes118
Files
-
26005a499650cdcb5a7c6ad1efa324f3_JaffaCakes118.dll windows:4 windows x86 arch:x86
39028b0f87f31c8b1693091d0feb464d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
FindClose
FindFirstFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
lstrcpyn
lstrlen
MultiByteToWideChar
SetFilePointer
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile
user32
GetWindowDC
IsWindow
KillTimer
LoadCursorA
LoadIconA
LoadStringA
MessageBoxA
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseCapture
ReleaseDC
SendMessageA
SetCursor
SetForegroundWindow
SetMenu
gdi32
CombineRgn
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
SetStretchBltMode
SetTextColor
SetWindowOrgEx
StretchBlt
TextOutA
shell32
DllRegisterServer
DragQueryFile
DragQueryPoint
Shell_NotifyIcon
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ