Static task
static1
Behavioral task
behavioral1
Sample
3f62046cf5b4109b4b01b9400481a105_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3f62046cf5b4109b4b01b9400481a105_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3f62046cf5b4109b4b01b9400481a105_JaffaCakes118
-
Size
130KB
-
MD5
3f62046cf5b4109b4b01b9400481a105
-
SHA1
63b62654a95586488fadd32b6143e0649386cdff
-
SHA256
8484a604eac458dfa3cd4021ac766d62ca1bcaae66729cda56cfee963abb32df
-
SHA512
49d8a971598bdd4aabc8d5673545c78d33eef259407a67174f6f6e7f3064d7d2e1db7a848cbeee56628139261d3b30776345a68d2275b29cc6e44d1a81a6aa05
-
SSDEEP
3072:cZ3VzG4UbTYVq3wrzfZGn9qnJq0o0hTX36DnhKWiqB9jY:cZMbeD7Zw9qJ5oGX36Fu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f62046cf5b4109b4b01b9400481a105_JaffaCakes118
Files
-
3f62046cf5b4109b4b01b9400481a105_JaffaCakes118.dll windows:4 windows x86 arch:x86
29f8bd90ef2fefe0b4054ad15fd875f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareFileTime
CompareStringA
CreateMutexA
EnumResourceLanguagesA
FindResourceA
GetCPInfo
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapCreate
RaiseException
TlsAlloc
UpdateResourceA
VirtualProtect
user32
CallNextHookEx
DestroyWindow
DrawTextA
GetClassInfoA
GetFocus
GetMessageA
GrayStringA
IsWindowVisible
OpenClipboard
SendMessageA
SetActiveWindow
UpdateWindow
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ