Static task
static1
Behavioral task
behavioral1
Sample
2e1c977df20136b7dc74b5a033de5262_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2e1c977df20136b7dc74b5a033de5262_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2e1c977df20136b7dc74b5a033de5262_JaffaCakes118
-
Size
51KB
-
MD5
2e1c977df20136b7dc74b5a033de5262
-
SHA1
867abaccfe23dd0eebc6e0bd319a96f51cb53c6b
-
SHA256
0a302c2400704b7ab005284872e780c10357901d3c0a3bb31aae3f1df9a122a4
-
SHA512
fdc2501aeb915e82b6ba90bb2af06a74b608c793bb4ed22eecffa1dae7759e798e8403d96d095789f4a8cf8351494656c5c8ef3931905b05edca7beb1283e000
-
SSDEEP
768:CjJTZd7Lz7K53I6KLNgE/+KpAU0Kg3TECri2qk7INVf8BYcnWTsLXqM:CjVZZa53I6KLNt2KehTE0tq9NVfHOH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e1c977df20136b7dc74b5a033de5262_JaffaCakes118
Files
-
2e1c977df20136b7dc74b5a033de5262_JaffaCakes118.dll windows:5 windows x86 arch:x86
17065e7168f160d1af6e3178b81011f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathAppendW
PathBuildRootA
user32
MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE