Static task
static1
Behavioral task
behavioral1
Sample
6091cad2b4855f374b0ecd6314a5d6e2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6091cad2b4855f374b0ecd6314a5d6e2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6091cad2b4855f374b0ecd6314a5d6e2_JaffaCakes118
-
Size
60KB
-
MD5
6091cad2b4855f374b0ecd6314a5d6e2
-
SHA1
f8161874a17136af54127f5f27913b4d2660b40c
-
SHA256
8c2fa2ee5cc1ea714bec379b3a6d699e5efbfa9896f0712861b941461587e14a
-
SHA512
7c8dede23b454981f92c89ffe8842cd8f785df0b28bd562db0fd4b2fc64b52e947320b6b682a97d59c3d02f6dd2859e4c47399c493dfa099db5a8368351d4d87
-
SSDEEP
1536:TXWmJN3VxQPKFYMsualPL9jv5kdsqS42DjSS:TNn2CFYMsuad9D5kds5LSS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6091cad2b4855f374b0ecd6314a5d6e2_JaffaCakes118
Files
-
6091cad2b4855f374b0ecd6314a5d6e2_JaffaCakes118.dll windows:4 windows x86 arch:x86
0380a00e9a00ffdc03a97c8241595930
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ToAscii
FillRect
kernel32
LoadLibraryW
SetHandleCount
ExitProcess
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
LocalFree
advapi32
RegSetValueExW
RegCloseKey
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.code Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ