Static task
static1
Behavioral task
behavioral1
Sample
44f5cd577955ef39c1bc022586a2952c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44f5cd577955ef39c1bc022586a2952c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
44f5cd577955ef39c1bc022586a2952c_JaffaCakes118
-
Size
51KB
-
MD5
44f5cd577955ef39c1bc022586a2952c
-
SHA1
f39a57766c37c83f6738075e8d37b30513254f30
-
SHA256
70cc540a88f5a7195159f4b0d6c43c5f0c108e77c6c1852c29ab2f6df580a325
-
SHA512
295ac4112c47c26a1eec8f7869f0fbef9e18dc7dde50c07f064361a098ea887c8dff65962d05fda3915c486b25ab6d9df015ccd4db3fdac1242c29258e7c890e
-
SSDEEP
768:4QRXusLlbizsU9t0S6B8LbRJlk7eeSpeqz4FFrVnI01Zw:43yYt0S6B8ZkQeyYFlw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44f5cd577955ef39c1bc022586a2952c_JaffaCakes118
Files
-
44f5cd577955ef39c1bc022586a2952c_JaffaCakes118.dll windows:4 windows x86 arch:x86
645e8f6fdbbaa1cd4b7cf1768db65fb0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetProcAddress
RtlUnwind
Sleep
LocalAlloc
GlobalAlloc
lstrcpyA
WritePrivateProfileStringA
LocalFree
GetTickCount
GlobalFree
GetCommandLineA
VirtualProtect
FreeLibrary
user32
LoadIconA
wsprintfA
SendDlgItemMessageA
GetMessageA
DispatchMessageA
ReleaseDC
GetDlgItem
GetForegroundWindow
SetTimer
KillTimer
GetDC
FillRect
GetClientRect
FindWindowA
RegisterWindowMessageA
RegisterClassA
CreateWindowExA
SetForegroundWindow
TranslateMessage
SendMessageA
PostMessageA
PostQuitMessage
GetParent
IsWindow
SetCursor
GetCursorPos
DefWindowProcA
EndDialog
EnableWindow
GetDlgItemInt
GetSystemMetrics
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
gdi32
GetClipBox
CreateFontIndirectA
DeleteObject
PatBlt
GetStockObject
msvcr71
_except_handler3
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ