Static task
static1
Behavioral task
behavioral1
Sample
4c23520fd2fce4376dd7e944c3814bbc_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4c23520fd2fce4376dd7e944c3814bbc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4c23520fd2fce4376dd7e944c3814bbc_JaffaCakes118
-
Size
97KB
-
MD5
4c23520fd2fce4376dd7e944c3814bbc
-
SHA1
af167ea8a681dbb2d6edad985c809d8a0c35bacc
-
SHA256
8567ea88ac1bb119f1cdf3017c23237ca5a5957766d1fb5ad21be93a9deb3cde
-
SHA512
4283dc689ea71e0399f81a87ffda0d1ce396bcc59f56ed81649637733a018f2990a8310788c17e0807ccfdd122e045069f1ead7841dabc056ba28f70e24623da
-
SSDEEP
1536:rzdA0CuCdY9OvHWI2i6uBDeOIneXJ008tM7orkk87WRjt9qqc63CPtabUPAnl9jO:ne0CuC+8vHmiDeZe5MdRj/Jc63CXc9jO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c23520fd2fce4376dd7e944c3814bbc_JaffaCakes118
Files
-
4c23520fd2fce4376dd7e944c3814bbc_JaffaCakes118.dll windows:4 windows x86 arch:x86
c5390a8a383227d9f1b222ca6dbdbcb5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
FillRect
EmptyClipboard
DispatchMessageW
kernel32
GetTickCount
RaiseException
GetOEMCP
ExitProcess
WideCharToMultiByte
lstrcatW
SetStdHandle
advapi32
RegSetValueExW
RegOpenKeyExW
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ