Static task
static1
Behavioral task
behavioral1
Sample
5d62490f9942779072712418c547802a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d62490f9942779072712418c547802a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5d62490f9942779072712418c547802a_JaffaCakes118
-
Size
50KB
-
MD5
5d62490f9942779072712418c547802a
-
SHA1
d39df44214f8adc9c5e67c743d5a6aeab78051ad
-
SHA256
44de587ca0d3220ef7bb3d390f2a3e71e35cbc8f076e781895abff4cc29c28d8
-
SHA512
eb272df1ebbb66f5959a550c94d3a43aad744fda3accbbda76f747e89986f614583e1253ad9b6acf870706cda5ac3d374d262bc09110a1a328c13668cb76d2f5
-
SSDEEP
768:JtqqcgWttN+4tWRcICZIPcStXVsjBLX1kxVSvYANKVZkzoeWqcokXxJVKyG:LWoHYZIcStl0kzSvYANKVKFco6Vg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d62490f9942779072712418c547802a_JaffaCakes118
Files
-
5d62490f9942779072712418c547802a_JaffaCakes118.dll windows:5 windows x86 arch:x86
c20711ed681eeb1a7212f563b3be6ced
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathAppendW
PathBuildRootW
user32
MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE