Static task
static1
Behavioral task
behavioral1
Sample
35d9ae370f0bb8a675a72e769348e680_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
35d9ae370f0bb8a675a72e769348e680_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
35d9ae370f0bb8a675a72e769348e680_JaffaCakes118
-
Size
86KB
-
MD5
35d9ae370f0bb8a675a72e769348e680
-
SHA1
57a69f2368945a0772559792059112da4ca7f9b4
-
SHA256
66f85d67ea426b45de3e704359cbb7b094b9deec6f513fecb5d1c28415cf00df
-
SHA512
bce4aea0fb9fde343f73a8807da2b924ddc85cb7e3db8437f736fa746120f07334d3c46afc2d314c58ed25a905d832b0cff1d9d8053ccfa51e5e53aee0aba439
-
SSDEEP
1536:QHtKoOK6VT/MS3CWfF2QgAR+00K1IjoKd18ztLVOThO+Y6u/b:+EkwLtvPlR+KIP8tLVOdbY6u/b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35d9ae370f0bb8a675a72e769348e680_JaffaCakes118
Files
-
35d9ae370f0bb8a675a72e769348e680_JaffaCakes118.dll windows:4 windows x86 arch:x86
a2f5e105e455b838c8d9b74f9927d15c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareStringA
CompareStringW
CreateMutexA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileSize
HeapAlloc
HeapCreate
HeapDestroy
InterlockedIncrement
IsBadReadPtr
LocalFree
LockResource
RtlUnwind
SetFilePointer
TlsFree
TlsGetValue
TlsSetValue
lstrcpyA
user32
CallWindowProcA
ClientToScreen
CloseClipboard
CreateWindowExA
EnableMenuItem
GetClassLongA
GetCursorPos
GetDC
GetDlgCtrlID
GetSysColorBrush
GetSystemMetrics
GetWindowTextLengthA
LoadCursorA
MapWindowPoints
ReleaseCapture
ReleaseDC
SendDlgItemMessageA
SetActiveWindow
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 970B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ