Static task
static1
Behavioral task
behavioral1
Sample
40bcc629d7f1f5fda768fe22b1181e00_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40bcc629d7f1f5fda768fe22b1181e00_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
40bcc629d7f1f5fda768fe22b1181e00_JaffaCakes118
-
Size
84KB
-
MD5
40bcc629d7f1f5fda768fe22b1181e00
-
SHA1
f3561cb9e7df5f92da94521f49800c84e8e9b5f3
-
SHA256
b275be05dcdbe4d65b625633b7b9da961ac5c75c66f04b8b7f8637109ab7c6ea
-
SHA512
9d9aa8c02b9f1af90804d3850eab0cdb3d61556372bf4bb64d20af6c2925c07163ee58ce373aec2e4f2b4f0b9afb3a5cb2e6f12bd4231c682fd7d51e2cb0b823
-
SSDEEP
1536:DzbPdb+1vroVtWVS7i7ZA3Xm0sW+kSj9j7:DzbAtoV8VtAHm0spj9j7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40bcc629d7f1f5fda768fe22b1181e00_JaffaCakes118
Files
-
40bcc629d7f1f5fda768fe22b1181e00_JaffaCakes118.dll windows:4 windows x86 arch:x86
ee6f83f16c8e4cba8f886ef6dbef2590
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
FillRect
DispatchMessageW
kernel32
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
RtlUnwind
LoadLibraryW
HeapFree
GetVersionExW
WriteConsoleW
ExitProcess
GetExitCodeProcess
TlsGetValue
advapi32
RegSetValueExW
RegEnumValueW
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dataa Size: 17KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ