Static task
static1
Behavioral task
behavioral1
Sample
3a66c0d27e1b37dce102e8c9ff9cca15_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a66c0d27e1b37dce102e8c9ff9cca15_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3a66c0d27e1b37dce102e8c9ff9cca15_JaffaCakes118
-
Size
112KB
-
MD5
3a66c0d27e1b37dce102e8c9ff9cca15
-
SHA1
d791b6601d088924db05c6bcaac530b49d653e8a
-
SHA256
3a949c154747c41951c8d590f32d05c497fa47d9df8512402567b263521a6727
-
SHA512
af49f9f42cd89211a821b95ea0084f0214b6ff3f58de47d37723245ffb18f0113f47c1010f96a8ea3b6e2cccdf0cf02f5a23d7fb0b066eafc199731b3ce319c2
-
SSDEEP
1536:bz4hpFv6RpxFxUI6a++9Iet2tNn37+stdqXnonvXvokL+oCoE5o+zXctgi:wARpEaft2tBS2dqyXHxCoEnc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a66c0d27e1b37dce102e8c9ff9cca15_JaffaCakes118
Files
-
3a66c0d27e1b37dce102e8c9ff9cca15_JaffaCakes118.dll windows:4 windows x86 arch:x86
6a814c81ea37e51b8470e6607eb5245e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetMenu
DialogBoxParamA
DrawTextA
LoadCursorA
CopyRect
InsertMenuA
CloseWindow
IsMenu
DialogBoxParamW
CreateIcon
kernel32
OpenFile
GetFileTime
CreateThread
GetComputerNameA
WriteFile
OpenFileMappingA
GetConsoleMode
GetCommandLineA
ExitThread
DeleteFileW
DeleteFileA
ReadFile
ReadConsoleA
Sleep
CreateProcessA
GetLastError
DeleteAtom
GlobalFree
GetFileSize
SetLastError
FindAtomA
FindFirstFileA
comctl32
ImageList_Create
ImageList_LoadImageA
ImageList_AddIcon
DrawStatusTextW
ImageList_DrawEx
CreateUpDownControl
ImageList_EndDrag
ImageList_Destroy
ImageList_GetIconSize
CreateToolbar
ImageList_Draw
CreateToolbarEx
DllGetVersion
ImageList_LoadImageW
ImageList_Add
ImageList_GetIcon
DrawStatusText
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 2B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 231B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ