Static task
static1
Behavioral task
behavioral1
Sample
498b23cfc71979d574101eb31b86586a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
498b23cfc71979d574101eb31b86586a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
498b23cfc71979d574101eb31b86586a_JaffaCakes118
-
Size
106KB
-
MD5
498b23cfc71979d574101eb31b86586a
-
SHA1
a0349469f584570ec6339e48efab87992740025e
-
SHA256
4f19118d64dcd2121c50cc7e1874db0030287c7bdd56744cb6e767daae7fc700
-
SHA512
40b8f0fa50fd5f674a91f68de8525bf5c5f5863bfaf490bd27650faf870f16cbff0c4f8017de6805a7542f10e8597a6912b4bfbaee928d91d444ce4a8ad9204c
-
SSDEEP
3072:G1GcaSi3FgtPG5FE/8PMBJ8vzXZGYc3a2dW0Gd5TimIkP4U:G1GcajsPGDtPMHKzJGBasdGdAra
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 498b23cfc71979d574101eb31b86586a_JaffaCakes118
Files
-
498b23cfc71979d574101eb31b86586a_JaffaCakes118.dll windows:4 windows x86 arch:x86
9a7d1bd8bbe5285fc9ae410fc8d2a5e7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CopyFileA
ExitProcess
FileTimeToLocalFileTime
GetFileType
GetTickCount
HeapAlloc
HeapCreate
IsBadCodePtr
LoadLibraryA
OpenEventA
ReadFile
SetErrorMode
SetFileAttributesA
UnmapViewOfFile
WaitForSingleObject
user32
CreateDialogIndirectParamA
DestroyWindow
GetActiveWindow
GetClassNameA
GetFocus
GetKeyState
GetLastActivePopup
GetMenuItemID
GetMenuState
GetScrollPos
GetSysColor
GetWindow
GetWindowTextA
IsWindowEnabled
ModifyMenuA
SetDlgItemTextA
SetMenuItemBitmaps
SetWindowTextA
TranslateMessage
UnhookWindowsHookEx
Sections
CODE Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ