Static task
static1
Behavioral task
behavioral1
Sample
28615b1dcdb84214fbc2b5154e11f9cc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
28615b1dcdb84214fbc2b5154e11f9cc_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
28615b1dcdb84214fbc2b5154e11f9cc_JaffaCakes118
-
Size
67KB
-
MD5
28615b1dcdb84214fbc2b5154e11f9cc
-
SHA1
3ecfc5d75cef3834132714dc599ae143271f9bbc
-
SHA256
db7081250229566be73e2527d4e30accec18f2c8b9e258da5d28263f7a162ed0
-
SHA512
3e55346e8b0cc9c236749d80f7dd678d5b8400d25c963f73bea184cfc6055929e3785e00ec77130e4c0d6a25ba1ae76930f59a2f7ae61784f9000b51750d5f0b
-
SSDEEP
1536:ZTayYKSu9rbcrN6BTz6bsVb48nx2PLb8V7oLHOiqxy5FSpMOKz:xaKSYrFBH6Ux2zb8V+vqkF5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28615b1dcdb84214fbc2b5154e11f9cc_JaffaCakes118
Files
-
28615b1dcdb84214fbc2b5154e11f9cc_JaffaCakes118.dll windows:4 windows x86 arch:x86
7d3b4559d74c1f39097d33709601add8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
FreeLibrary
GetFileSize
GetThreadLocale
GlobalDeleteAtom
GlobalFree
GlobalGetAtomNameA
HeapAlloc
HeapCreate
HeapSize
MultiByteToWideChar
OpenEventA
SetStdHandle
VirtualProtect
user32
CopyRect
DispatchMessageA
EmptyClipboard
GetDesktopWindow
GetScrollPos
GrayStringA
LoadCursorA
MapDialogRect
ModifyMenuA
PostQuitMessage
RegisterClipboardFormatA
SetWindowTextA
TabbedTextOutA
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ