dbobjUI
Static task
static1
Behavioral task
behavioral1
Sample
2eb932daeb25a00ccda386531c93e7aa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2eb932daeb25a00ccda386531c93e7aa_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2eb932daeb25a00ccda386531c93e7aa_JaffaCakes118
-
Size
120KB
-
MD5
2eb932daeb25a00ccda386531c93e7aa
-
SHA1
b6c46134da79c8ae2fa93b5c2c554aec02a33942
-
SHA256
938c58902a8c73da1e1f77f76da771e839a0172e97398a49e0551eee981d7f48
-
SHA512
4f354ac1c725e5a7b693a5a877abe5f33a7867bb62dd3285176165a949287d63483862432777c8a03aeed1ace878907ba0821c97559673a8884d55d308de3b4d
-
SSDEEP
3072:9TyJzGawzPQfkBg4dbr7z7oByHYz9R/r3:RsKawzPQcBg4db3/2GG9R/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2eb932daeb25a00ccda386531c93e7aa_JaffaCakes118
Files
-
2eb932daeb25a00ccda386531c93e7aa_JaffaCakes118.dll windows:4 windows x86 arch:x86
a3f0accd0b36aaeae6b652f0d9abe072
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
Sleep
GetModuleFileNameA
GetProcAddress
MapViewOfFile
LeaveCriticalSection
LocalFree
GetTickCount
LoadLibraryA
ole32
OleSetContainedObject
CoCreateGuid
OleCreate
CoInitialize
CreateBindCtx
user32
SendMessageA
SetWindowLongA
GetClassNameA
SetTimer
CreateWindowExA
GetWindowLongA
DispatchMessageA
FindWindowA
GetParent
GetMessageA
PostQuitMessage
advapi32
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
Exports
Exports
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1004B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ