Static task
static1
Behavioral task
behavioral1
Sample
38b5480e90657df02bdae398be57d9b7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
38b5480e90657df02bdae398be57d9b7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
38b5480e90657df02bdae398be57d9b7_JaffaCakes118
-
Size
86KB
-
MD5
38b5480e90657df02bdae398be57d9b7
-
SHA1
94345c1ac87f786502a4e21988b9920835bf8397
-
SHA256
9bafaa141c67f96b9eceee474f8c646451231c04032606fdf0ac8ad68de3dc18
-
SHA512
b9d9a6ffa1aade4764ab74c850b5095334b28fdce84ab6c5b506050c98d8f19c158d8c30c475637dc4af8899396b9fb076405459c31b43d964e3129f8c4817fb
-
SSDEEP
1536:AkDLDcXje0LgK6jY1PyKpx6lP2ItfUD6rBiXhJcKr67d/QlJ:D/cXqtK6JY6lP2IFUDUiXhRId/QlJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38b5480e90657df02bdae398be57d9b7_JaffaCakes118
Files
-
38b5480e90657df02bdae398be57d9b7_JaffaCakes118.dll windows:4 windows x86 arch:x86
00599ed1757713013cbd210911e6a946
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowWindow
GetWindowTextA
EndMenu
EnableScrollBar
DrawMenuBar
CreateMDIWindowA
CreateIcon
CharUpperBuffA
kernel32
GetCPInfo
ExitProcess
WriteFile
GetProcessHeap
advapi32
RegSetValueExA
RegCloseKey
RegEnumValueA
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ