Static task
static1
Behavioral task
behavioral1
Sample
60d723bfc60055216d5fedb8a49d6ba2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
60d723bfc60055216d5fedb8a49d6ba2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
60d723bfc60055216d5fedb8a49d6ba2_JaffaCakes118
-
Size
58KB
-
MD5
60d723bfc60055216d5fedb8a49d6ba2
-
SHA1
427233c43e3224b97f9b27fea00755082f183d03
-
SHA256
92c1893be0c1e5acd966329db6739b69ebb10717e2e674b1f27d8ccbe13442e1
-
SHA512
737f90c80d4224098bdd0332954ba02f14d7525cc32b3d6dc233a44a8037591270d4b85472711d7feab3d913b8d3bea3f190440422a40aab8a7dbfb48f9ad9c7
-
SSDEEP
1536:IaZGpO1OxX49B5zr170H2w1ZeGXSMIpC:5ZGpOkxXsB5VQWIKI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60d723bfc60055216d5fedb8a49d6ba2_JaffaCakes118
Files
-
60d723bfc60055216d5fedb8a49d6ba2_JaffaCakes118.dll windows:4 windows x86 arch:x86
f033c8b8fe2a85bfab9f9987d1824cd9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapAlloc
HeapCreate
HeapFree
GetProcAddress
LoadLibraryW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
LocalFree
FormatMessageW
GlobalFree
GlobalSize
GlobalReAlloc
lstrcpyW
lstrcpynW
GetFileAttributesW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
GetCommandLineA
GlobalAlloc
GetModuleHandleW
VirtualProtect
user32
DestroyWindow
ShowWindow
SetWindowLongW
DrawTextW
CharNextW
SetCursor
IsWindow
GetWindowLongW
CharUpperBuffW
CharLowerW
LoadStringW
LoadIconW
EnableWindow
SendMessageW
SetWindowTextW
GetParent
RedrawWindow
DefWindowProcW
GetDlgItem
gdi32
SetTextColor
GetTextExtentPointW
ExtTextOutW
msvcr71
_onexit
malloc
_initterm
free
_except_handler3
__CppXcptFilter
__dllonexit
_adjust_fdiv
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ