Static task
static1
Behavioral task
behavioral1
Sample
27312d60af31ec124fa1eec2e12e3e38_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
27312d60af31ec124fa1eec2e12e3e38_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
27312d60af31ec124fa1eec2e12e3e38_JaffaCakes118
-
Size
232KB
-
MD5
27312d60af31ec124fa1eec2e12e3e38
-
SHA1
11e529da4139f8d55dec843d2f4b3a18d57eb324
-
SHA256
7e8b938ee6c43a7245a2384f724a424ef57f254e6503f42f2a2183dd085d0462
-
SHA512
c8a7a4506fa05a480b4f42417e8778f87295df0d70e8ef09faf6b1ec12aa168d9aceb36e1b27ae8783f02df4283297ec51cf02c58f025003a20e62d884973af3
-
SSDEEP
3072:kHqbq+ZUeIOMSWmKBsDR6+NC4xzXt9A+PlVLHzxre+yptG2wnI+bnI6LqwH4fHdL:kHqbZUOMSWm8cXzXs+LFRcCn5CoVAIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27312d60af31ec124fa1eec2e12e3e38_JaffaCakes118
Files
-
27312d60af31ec124fa1eec2e12e3e38_JaffaCakes118.dll windows:4 windows x86 arch:x86
514c4c1141c3d9d3dcedb42bddd01132
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess
user32
OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu
advapi32
RegOpenKeyExA
Sections
.text Size: 147KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 81KB - Virtual size: 508KB
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ