Static task
static1
Behavioral task
behavioral1
Sample
2ae4f38aaef3c7b67550fc43b8daa038_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ae4f38aaef3c7b67550fc43b8daa038_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
2ae4f38aaef3c7b67550fc43b8daa038_JaffaCakes118
-
Size
51KB
-
MD5
2ae4f38aaef3c7b67550fc43b8daa038
-
SHA1
0804005fbfc0022a2d6c83e1c612c9c3b56f618a
-
SHA256
96f5d1e5b141b64c3ae9d594725b50e33fc328ea7081d0caabdc00a3432341ab
-
SHA512
15b097a6172ea5eea3df3b6e4777b4b97146c05eac696cd618152b85ff37b658d24ce4b93fb006ebe09b40dec495b0d2be33148b4a705d2f5afce692adc26ede
-
SSDEEP
768:SQXX1NLlbizsU9t0S6B8LbRJlk7eeSpeqz4FFj501Zn:SufYt0S6B8ZkQeyYFGn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ae4f38aaef3c7b67550fc43b8daa038_JaffaCakes118
Files
-
2ae4f38aaef3c7b67550fc43b8daa038_JaffaCakes118.dll windows:4 windows x86 arch:x86
645e8f6fdbbaa1cd4b7cf1768db65fb0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetProcAddress
RtlUnwind
Sleep
LocalAlloc
GlobalAlloc
lstrcpyA
WritePrivateProfileStringA
LocalFree
GetTickCount
GlobalFree
GetCommandLineA
VirtualProtect
FreeLibrary
user32
LoadIconA
wsprintfA
SendDlgItemMessageA
GetMessageA
DispatchMessageA
ReleaseDC
GetDlgItem
GetForegroundWindow
SetTimer
KillTimer
GetDC
FillRect
GetClientRect
FindWindowA
RegisterWindowMessageA
RegisterClassA
CreateWindowExA
SetForegroundWindow
TranslateMessage
SendMessageA
PostMessageA
PostQuitMessage
GetParent
IsWindow
SetCursor
GetCursorPos
DefWindowProcA
EndDialog
EnableWindow
GetDlgItemInt
GetSystemMetrics
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
gdi32
GetClipBox
CreateFontIndirectA
DeleteObject
PatBlt
GetStockObject
msvcr71
_except_handler3
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ