_Tl_SiVLydV0MD
Static task
static1
Behavioral task
behavioral1
Sample
40fd128cb6148c254aac0b9d3309e7f0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40fd128cb6148c254aac0b9d3309e7f0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
40fd128cb6148c254aac0b9d3309e7f0_JaffaCakes118
-
Size
533KB
-
MD5
40fd128cb6148c254aac0b9d3309e7f0
-
SHA1
c4195623b3fee1ed7d8775a300a4a50285d12f6f
-
SHA256
ccafc8b8177f69d8d590770c5c28e6f1c53c4da816dde3fff667b65d95319d67
-
SHA512
ff0026ab49f47e046e195a538d8f8cb6c4cdc8518de948a46dc9ede990e455daacefea20bcb35f5fe09157522e0de976791d45277afdf2cc6441b0e699d378ad
-
SSDEEP
6144:kHpzrT1az+H9MSRZrtiFcOYWK5sIwxHuVcvY:SNsaH9MqZucH0THun
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40fd128cb6148c254aac0b9d3309e7f0_JaffaCakes118
Files
-
40fd128cb6148c254aac0b9d3309e7f0_JaffaCakes118.dll windows:4 windows x86 arch:x86
6a87df4ae202b67a56c786d68dfc2aa8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetDateFormatA
GetLocalTime
EnumCalendarInfoA
SetEndOfFile
GetProcAddress
Sleep
SizeofResource
lstrcmpA
HeapAlloc
VirtualAllocEx
ExitProcess
GlobalAlloc
LoadLibraryA
GetCPInfo
IsBadReadPtr
ResetEvent
SetErrorMode
GetCommandLineW
VirtualAlloc
GlobalDeleteAtom
GetStringTypeW
lstrlenA
LoadResource
GetOEMCP
GlobalFindAtomA
user32
LoadBitmapA
GetMenu
GetCursor
IsMenu
GetWindowTextLengthA
GetCapture
IsCharUpperA
CharUpperA
IsDlgButtonChecked
ole32
CreateStreamOnHGlobal
CoDisconnectObject
CoCreateFreeThreadedMarshaler
CoCreateInstanceEx
StringFromIID
CoGetMalloc
CLSIDFromString
PropVariantClear
CLSIDFromProgID
comctl32
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_GetBkColor
ImageList_Add
ImageList_Read
Exports
Exports
Sections
CODE Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lkdata Size: 491KB - Virtual size: 491KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ