Static task
static1
Behavioral task
behavioral1
Sample
6094d0ae8e2623a77a3b5c614824e25d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6094d0ae8e2623a77a3b5c614824e25d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6094d0ae8e2623a77a3b5c614824e25d_JaffaCakes118
-
Size
79KB
-
MD5
6094d0ae8e2623a77a3b5c614824e25d
-
SHA1
917e45ef34b4130e74de065432027d16d31296b0
-
SHA256
96014f6a706081cb2009a3ef0c47032655b57dcde716f23f1c1c7bb8950944ef
-
SHA512
a75603005fb224cd2e9174aa2e955fe0ef655f4dd80b7854bf0c6be17087c65e63b80ecb7311200f068a26ad41630f425d029c56f37056bfc52df63b05df57ce
-
SSDEEP
1536:xUj46xhhEugWNwRXyAN1xIoBvXnemXS/PYP4KufMAdsCCtdQtqVfGdYNonsUdXZ:2E6xwtXye1PFXHXS/POg0pyaxNU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6094d0ae8e2623a77a3b5c614824e25d_JaffaCakes118
Files
-
6094d0ae8e2623a77a3b5c614824e25d_JaffaCakes118.dll windows:4 windows x86 arch:x86
e40e2eab66a7049275b9fda0e9a5e455
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
SetMenuInfo
GetCursor
EndMenu
DeleteMenu
CreateDesktopW
CreateCursor
CopyRect
CharUpperA
CharLowerA
BeginPaint
kernel32
GetDateFormatA
ReadFile
SetLastError
TlsSetValue
lstrlenA
lstrcpynA
RaiseException
advapi32
RegQueryValueA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 26KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 497B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 51KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ