Static task
static1
Behavioral task
behavioral1
Sample
3b0e8cb408dac8f1f6a0622683511581_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3b0e8cb408dac8f1f6a0622683511581_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3b0e8cb408dac8f1f6a0622683511581_JaffaCakes118
-
Size
44KB
-
MD5
3b0e8cb408dac8f1f6a0622683511581
-
SHA1
73a84e526b426e3d650dfd35c1868879050be90a
-
SHA256
c8ae2e23cc7f0cb344c699597867fcfc44c43ad2d6b94bf5307d4e5bcdf49d78
-
SHA512
d9b0024cb66e7ee89ea08ee895dcfeceb34d7c5279c992819f02863373a93039c28116b843e807a525e9215e6eca14c70f271c68161186629d111699891b3a31
-
SSDEEP
768:KLW9CKpPo2OqdHfnvOFzMinmyDJsYxYeYWx+rGPyW2imHmSwirTah2:O2CsPo2rHadWY2ixQMmHWY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b0e8cb408dac8f1f6a0622683511581_JaffaCakes118
Files
-
3b0e8cb408dac8f1f6a0622683511581_JaffaCakes118.dll windows:4 windows x86 arch:x86
264ccade4426fb999db6aef729ff8d39
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
secur32
GetUserNameExW
kernel32
GetShortPathNameA
GetProcAddress
GetModuleHandleW
FindFirstChangeNotificationW
GetCurrentThreadId
GetTickCount
GetLastError
lstrlenW
lstrcatW
lstrcpynW
lstrcmpiW
FreeLibrary
LoadLibraryW
oleaut32
OleLoadPictureEx
GetRecordInfoFromTypeInfo
VarI4FromDec
SysFreeString
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ