Static task
static1
Behavioral task
behavioral1
Sample
3f511e767f1b931f0c84dbfaecd318fc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f511e767f1b931f0c84dbfaecd318fc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3f511e767f1b931f0c84dbfaecd318fc_JaffaCakes118
-
Size
647KB
-
MD5
3f511e767f1b931f0c84dbfaecd318fc
-
SHA1
e1260ac73c02b94f2396561575ee8500f8c27e82
-
SHA256
7e29035266744638927e9773142820ed829f6b7634c076d71e4ae8bbb9d57193
-
SHA512
795fccb7b90d3d3006c61b862ca7fe9351199685a919327ad695c6377e31ace9c6d1ee82f4cd0bd881fa193117e54f1fa3864d3a62f8dd143749f3f06623c6d1
-
SSDEEP
12288:BOVfFoKLmFKlYx2aU33IqsyEJR8C3e050S8EJ+yf:BOVfFcx2z4yEJSU8E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f511e767f1b931f0c84dbfaecd318fc_JaffaCakes118
Files
-
3f511e767f1b931f0c84dbfaecd318fc_JaffaCakes118.dll windows:5 windows x86 arch:x86
72b6b37b87f2cc117eba7c91edf629fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
MessageBoxA
kernel32
lstrcmpiA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
OleUninitialize
comctl32
InitializeFlatSB
imm32
ImmGetCompositionStringA
shell32
ShellExecuteW
winspool.drv
OpenPrinterW
wsock32
ntohs
Sections
.text Size: - Virtual size: 882KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 25KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.��˵0 Size: - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.��˵1 Size: - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.��˵2 Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ