Static task
static1
Behavioral task
behavioral1
Sample
3230adebaac0066179efae7c049a9cb0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3230adebaac0066179efae7c049a9cb0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3230adebaac0066179efae7c049a9cb0_JaffaCakes118
-
Size
58KB
-
MD5
3230adebaac0066179efae7c049a9cb0
-
SHA1
6671aaa12b7a5993850cc17e316f74ec05fccc2b
-
SHA256
ad0765fc33c569510900e2692a4218bd55b4417c1dd0dc02969243e577f1a3af
-
SHA512
f33efd9528f3ab01e28aa9fbfb3ed2e93ae421bf97bc33b1236be30124d57f528109600ce5d2205341eb4bf679a4560077e50ccc1a9215b37f8d072d716d94d7
-
SSDEEP
768:pfmhUzmolEPAqjOeGxG9B5kgRr170wE5Iw1ZewHX8aOOF80pDkqc5CI:pu26bAqKX49B5zr170H2w1ZeGXSMI5C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3230adebaac0066179efae7c049a9cb0_JaffaCakes118
Files
-
3230adebaac0066179efae7c049a9cb0_JaffaCakes118.dll windows:4 windows x86 arch:x86
f033c8b8fe2a85bfab9f9987d1824cd9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapAlloc
HeapCreate
HeapFree
GetProcAddress
LoadLibraryW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
FormatMessageW
GlobalFree
GlobalSize
GlobalReAlloc
lstrcpyW
lstrcpynW
GetFileAttributesW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
GetCommandLineA
GlobalAlloc
GetModuleHandleW
VirtualProtect
user32
DestroyWindow
ShowWindow
SetWindowLongW
DrawTextW
CharNextW
SetCursor
IsWindow
GetWindowLongW
CharUpperBuffW
CharLowerW
LoadStringW
LoadIconW
EnableWindow
SendMessageW
SetWindowTextW
GetParent
RedrawWindow
DefWindowProcW
GetDlgItem
gdi32
SetTextColor
GetTextExtentPointW
ExtTextOutW
msvcr71
_onexit
malloc
_initterm
free
_except_handler3
__CppXcptFilter
__dllonexit
_adjust_fdiv
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ