CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
3a2d0488eef46403e97e74b86a0a6aab_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a2d0488eef46403e97e74b86a0a6aab_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
3a2d0488eef46403e97e74b86a0a6aab_JaffaCakes118
-
Size
382KB
-
MD5
3a2d0488eef46403e97e74b86a0a6aab
-
SHA1
276ebb187dcb246e86d3c567878b542934a5dfd1
-
SHA256
9311ef9a4dc3bf67ceb92c83830bd94b00d6e009e1950307f42bb1205d68b874
-
SHA512
72c436d62adc90a146e625fd3bc3a1b7b6259c28295aed3930c297c670fb71a34492dc1eab39f3b0fda84fe87d83f2949b4f8197f1d37442c13214cf3737c4aa
-
SSDEEP
6144:T0LGBwGARJFKq9FlV6ubV+aB0frkzQfUszF91na5pHEBJ5a/PmcNzYSO4PIEy:oLGqGARJFLXuOsnfvj1OEBJUnmcZOsIx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a2d0488eef46403e97e74b86a0a6aab_JaffaCakes118
Files
-
3a2d0488eef46403e97e74b86a0a6aab_JaffaCakes118.dll windows:4 windows x86 arch:x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Exports
Exports
Sections
.text Size: 358KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f117 Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dswlab Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.heike Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE