Static task
static1
Behavioral task
behavioral1
Sample
2e09c1b4d9c580b10c49e5bb634f34d6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e09c1b4d9c580b10c49e5bb634f34d6_JaffaCakes118.dll
Resource
win10v2004-20240708-en
General
-
Target
2e09c1b4d9c580b10c49e5bb634f34d6_JaffaCakes118
-
Size
65KB
-
MD5
2e09c1b4d9c580b10c49e5bb634f34d6
-
SHA1
db9a5c646b60c6198db68a79941ae06311a0f349
-
SHA256
c5744b433b09349ddd195db81e34dc7ad1a9f8099f20e9db5b31ca495d28c7c0
-
SHA512
76adcde2954332bf930b468ab30da2b7239532d8047ab3a45ec57dcb2f1a24c49287bd3589172b13891cc8952aa416175893cd682209ac3280a07aba21f63cb4
-
SSDEEP
1536:4bl0zZ/iCw59di8LBFK7DIzfdC8l9C5xh3x:00zZqhdimwUs8lM5xz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e09c1b4d9c580b10c49e5bb634f34d6_JaffaCakes118
Files
-
2e09c1b4d9c580b10c49e5bb634f34d6_JaffaCakes118.dll windows:4 windows x86 arch:x86
70266f21bf9e8fbe0a4177a12b3dd9a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
LsaEnumerateTrustedDomains
LsaGetRemoteUserName
LsaICLookupNames
LsaLookupPrivilegeDisplayName
RegCloseKey
LsaGetUserName
dsound
DirectSoundCreate
DirectSoundFullDuplexCreate
DirectSoundCaptureEnumerateA
DirectSoundCaptureCreate8
kernel32
GetModuleHandleA
GetLocalTime
GetCommandLineA
ExitProcess
CloseHandle
LocalAlloc
SetUnhandledExceptionFilter
GetStartupInfoA
msvfw32
MCIWndCreateA
ICLocate
ICInstall
DrawDibGetBuffer
DrawDibChangePalette
ole32
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoGetClassObject
CreateStreamOnHGlobal
DoDragDrop
GetRunningObjectTable
OleInitialize
OleLockRunning
OleUninitialize
ProgIDFromCLSID
ReadClassStg
StgCreateDocfileOnILockBytes
WriteClassStm
CoCreateInstance
CLSIDFromProgID
CreateBindCtx
msvbvm60
__vbaFailedFriend
__vbaCyMul
user32
CreateAcceleratorTableA
IsCharUpperA
LoadIconA
ShowCursor
CharToOemA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ