Static task
static1
Behavioral task
behavioral1
Sample
299be8ed8d9f7a696f51f94458f8fa90_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
299be8ed8d9f7a696f51f94458f8fa90_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
299be8ed8d9f7a696f51f94458f8fa90_JaffaCakes118
-
Size
97KB
-
MD5
299be8ed8d9f7a696f51f94458f8fa90
-
SHA1
db6e63a7ffde57e00d4e0fb491c0651c68024716
-
SHA256
07f68d0dcf5da9d84a8b93733c10eea2a66613c85bfe42ff3309a41cf9facde8
-
SHA512
cb3a7937f907722b44a4bc211f4af06cbb246753b1c9cb3ae8a10bdad8e5d15363ca6c30114767dcaea4be5e42ce0b0d7daccf51c5c2f8201bd31eba7ec450e6
-
SSDEEP
1536:/bbgZILGwGGLP+MRq9sOrQ2NGiY5XD4Vu/cRmeANg4acB2TcSxVAIgkvuoQ9jtL:/bbQcGCr+MAtZNGNXEtm+5Kkm9jtL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 299be8ed8d9f7a696f51f94458f8fa90_JaffaCakes118
Files
-
299be8ed8d9f7a696f51f94458f8fa90_JaffaCakes118.dll windows:4 windows x86 arch:x86
b8b4ffd3f2ac0701c466eae53c09b9f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
kernel32
GetFileType
GetModuleHandleW
GetEnvironmentStringsW
FreeLibrary
ExitProcess
HeapCreate
TlsGetValue
LocalFree
GetTickCount
advapi32
RegQueryValueExW
RegEnumValueW
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ