Static task
static1
Behavioral task
behavioral1
Sample
4650434c7399bbb5b9e33cefbe4dbf93_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4650434c7399bbb5b9e33cefbe4dbf93_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4650434c7399bbb5b9e33cefbe4dbf93_JaffaCakes118
-
Size
324KB
-
MD5
4650434c7399bbb5b9e33cefbe4dbf93
-
SHA1
df36725aacb0ea7f792a0b7585c92700134f4dcf
-
SHA256
a74469eee9c4fa2a675e5ac6b1b7b683da1e363c2dfc47560f57b924272427f7
-
SHA512
ed425d118081400595d1fe3be88d408fea4838c0d9e267e83c2e38c2a466fec5433d5392f4244248e62aa0e0c2a036e9be58272cf376bc042b090130b8e5a84b
-
SSDEEP
6144:wEIAOsUB/bXiaXUfzeCtSXA7sjYCglYASw4LUif9mgUqT:HEB/Tiq2zeCteECglYT/jFvUqT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4650434c7399bbb5b9e33cefbe4dbf93_JaffaCakes118
Files
-
4650434c7399bbb5b9e33cefbe4dbf93_JaffaCakes118.dll windows:4 windows x86 arch:x86
897977fdae8618081fd52b79b82b031d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
EndDialog
EmptyClipboard
DrawCaption
DispatchMessageA
DefDlgProcA
CreatePopupMenu
CreateMenu
CreateDesktopA
CreateAcceleratorTableA
BeginPaint
ActivateKeyboardLayout
kernel32
lstrcmpiA
lstrcatA
RaiseException
LeaveCriticalSection
GetTimeFormatA
GetModuleHandleA
GetFileSize
FreeResource
EnumResourceLanguagesA
lstrlenA
Sections
.text Size: 76KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ