Static task
static1
Behavioral task
behavioral1
Sample
2ba632bf9d34bb916458ee744438fb55_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2ba632bf9d34bb916458ee744438fb55_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2ba632bf9d34bb916458ee744438fb55_JaffaCakes118
-
Size
289KB
-
MD5
2ba632bf9d34bb916458ee744438fb55
-
SHA1
c2d360029ff67de27b76989d248ac29339fff6d6
-
SHA256
7c82b900df1b49a0e7ce9d270c051f2aa8201e13be44ce70ae76332fc7870b86
-
SHA512
0c4eebfa48b141d85161fe3e9e45c08c872a94be395cccb16c81e6cc5203b2c89686579d2078626c62a118cb8b5685fdc1c2adea7f20ee793a431afa1c389a34
-
SSDEEP
6144:ERlmvhtDP5aifLpxOrqdh5GIbGTRn3KqDNX1rG0E9k:mlmjDPQoYrqcI6V3LxNG0d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ba632bf9d34bb916458ee744438fb55_JaffaCakes118
Files
-
2ba632bf9d34bb916458ee744438fb55_JaffaCakes118.dll windows:4 windows x86 arch:x86
2248b104f3ace756b1d1fa47765c2035
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
OemToCharW
OffsetRect
RegisterClassA
LoadAcceleratorsA
SetMenuInfo
ShowOwnedPopups
GetFocus
FillRect
EndPaint
EndDialog
EnableMenuItem
EmptyClipboard
DrawTextA
DrawMenuBar
DefDlgProcA
CreateMenu
CreateIconFromResourceEx
CreateIconFromResource
CreateIcon
CopyRect
CharUpperBuffA
CharUpperA
SetFocus
CharToOemBuffA
kernel32
SetLastError
EnumResourceLanguagesA
ExitProcess
FindResourceA
lstrcpynA
lstrcpyA
WriteFile
EnterCriticalSection
MapViewOfFile
GetVersion
GetTimeFormatA
GetDateFormatA
ole32
CoInitialize
OleCreateLinkToFileEx
CoGetClassObject
OleGetIconOfFile
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 257KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ