Static task
static1
Behavioral task
behavioral1
Sample
46a37845a6414b7196dd3cb228ad1a3b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46a37845a6414b7196dd3cb228ad1a3b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
46a37845a6414b7196dd3cb228ad1a3b_JaffaCakes118
-
Size
28KB
-
MD5
46a37845a6414b7196dd3cb228ad1a3b
-
SHA1
0d887ff188e7c8a9069e2cced517dbdead66f91f
-
SHA256
f80eca3956b220610d1c438651cac4d0b57712303d4b30d13dce39df2c5eabd4
-
SHA512
c3afbc042c6442c75669aaf86ff9d29ff16eec9887e2d6f219094a8b12c8c7e9b1c92f5b8602774a87753fef955e60afb7cccfbf171dca7fe1b4aeaa06d538ce
-
SSDEEP
384:qz3ssBGP6NoXU2FurcVCXy3qLFVwPvAdc5xjbSGHr+fQbKtK+86idW:+ss4XU2UIYX0Ad0xjvSkB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46a37845a6414b7196dd3cb228ad1a3b_JaffaCakes118
Files
-
46a37845a6414b7196dd3cb228ad1a3b_JaffaCakes118.dll windows:5 windows x86 arch:x86
24a14eea906fb1c452a0323027d1aed4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetModuleHandleA
SetLastError
LoadLibraryA
GetLastError
user32
wsprintfW
UpdateWindow
TranslateMessage
ShowWindow
SetWindowTextW
RegisterWindowMessageW
PeekMessageW
OpenClipboard
LoadIconW
IsZoomed
IsDialogMessageW
IsClipboardFormatAvailable
GetWindowPlacement
GetClipboardData
EnumChildWindows
EnableWindow
DispatchMessageW
DestroyWindow
CreateDialogParamW
CloseClipboard
CallNextHookEx
gdi32
BitBlt
CreateSolidBrush
DeleteDC
CreateCompatibleDC
CreateDIBitmap
TranslateCharsetInfo
TextOutW
StretchBlt
SetTextColor
SetStretchBltMode
SetBkColor
SelectObject
PatBlt
GetTextMetricsW
GetTextFaceW
GetTextExtentPointW
GetTextExtentPoint32W
GetStockObject
GetDeviceCaps
ExtTextOutW
Escape
DeleteObject
CreateFontIndirectW
advapi32
RegOpenKeyExW
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data2 Size: 512B - Virtual size: 7B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data3 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 630B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ