Static task
static1
Behavioral task
behavioral1
Sample
5d8557f2e02d5ade7c7cea26f80d8d2c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d8557f2e02d5ade7c7cea26f80d8d2c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5d8557f2e02d5ade7c7cea26f80d8d2c_JaffaCakes118
-
Size
91KB
-
MD5
5d8557f2e02d5ade7c7cea26f80d8d2c
-
SHA1
75b38d4e01ca90b58687c9b10e4120973826db58
-
SHA256
d4ebd6b5a052b678c74d451c2d1efaf467df5c27fd7256bc40191b25dd57c71f
-
SHA512
cd93fd9010b982162e7bd005011effd8595553cd10b0e0f8d92d7316fb4752b80658f673fe4da2ae5010615da89ced6319a341b0294aaa0ee10ce9efd49fc903
-
SSDEEP
1536:X58wkO6A3wOYbcfm2IG/tzdA+HhQk6oSJ4yuRm07l6g0KXun:X5tkQwQO2vzdA+H9wJuRmC2n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d8557f2e02d5ade7c7cea26f80d8d2c_JaffaCakes118
Files
-
5d8557f2e02d5ade7c7cea26f80d8d2c_JaffaCakes118.dll windows:4 windows x86 arch:x86
3467f6d2fc1e6beaf91007633922eac9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
SetMenuInfo
LoadImageA
LoadAcceleratorsA
GetMenu
GetFocus
GetDC
GetCursor
EndPaint
EnableScrollBar
DispatchMessageA
DestroyCaret
CreatePopupMenu
CreateIconFromResource
CreateDesktopA
CreateAcceleratorTableA
CopyRect
CopyImage
CharToOemBuffA
CharPrevA
BeginPaint
wsprintfA
kernel32
FlushFileBuffers
FreeResource
EnumResourceNamesA
EnumResourceLanguagesW
GetSystemTimeAsFileTime
GetVersion
GetVersionExA
lstrcpyA
lstrcmpA
WriteFile
VirtualAlloc
TlsFree
SleepEx
Sleep
SetLastError
OpenFile
MapViewOfFile
LoadResource
GetFileSize
oleaut32
SetErrorInfo
SysReAllocString
SysStringLen
VarBstrCat
RevokeActiveObject
OleLoadPicture
Sections
.text Size: 18KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ