Static task
static1
Behavioral task
behavioral1
Sample
64aef4d8be0c81abc22928677b244ba9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64aef4d8be0c81abc22928677b244ba9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
64aef4d8be0c81abc22928677b244ba9_JaffaCakes118
-
Size
69KB
-
MD5
64aef4d8be0c81abc22928677b244ba9
-
SHA1
ac001680795d8a2b61c6b6db8b944eeac7139c5d
-
SHA256
0194f06f2a0f20a7f1eadd3d8f4f3ac6ed59f2dc79fb54234fb9b2e463a5081f
-
SHA512
8c938aebe191b3160245839976254caa518e6323b46501417f2df482a0a04b6c0bf1d23388b4cfb9a5743d78b5363eba54eb80a05132f6fb061e92d9b265d55b
-
SSDEEP
1536:caIjNkux4JdpGd1543EmKRQ3OMBpQ2OwJBY6WDPa3x:cLNkuxUd+54UmKRQ3OMbQ2OGY16
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64aef4d8be0c81abc22928677b244ba9_JaffaCakes118
Files
-
64aef4d8be0c81abc22928677b244ba9_JaffaCakes118.dll windows:4 windows x86 arch:x86
7a8bbdf3be06a0d4f48bc45138282198
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvfw32
ICSendMessage
ICSeqCompressFrameEnd
ICGetDisplayFormat
MCIWndCreateW
ICRemove
kernel32
UnmapViewOfFile
lstrlenA
WriteFile
SetUnhandledExceptionFilter
RaiseException
CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
MapViewOfFile
msvbvm60
__vbaAryRebase1Var
__vbaFileCloseAll
__vbaCyAdd
__vbaCheckType
__vbaAryRecMove
advapi32
LsaDeleteTrustedDomain
LsaICLookupSids
RegOpenKeyExA
LsaCreateTrustedDomainEx
wininet
InternetReadFile
InternetConnectA
InternetCanonicalizeUrlA
FindFirstUrlCacheEntryA
FindFirstUrlCacheGroup
user32
IsCharLowerA
CharLowerA
ole32
OleInitialize
WriteFmtUserTypeStg
WriteClassStm
WriteClassStg
CoCreateInstance
CoGetClassObject
CoGetMalloc
CoInitialize
CoUninitialize
CreateDataAdviseHolder
GetConvertStg
OleDuplicateData
OleGetClipboard
StringFromGUID2
OleSaveToStream
OleSetClipboard
OleUninitialize
dsound
DirectSoundFullDuplexCreate
DirectSoundEnumerateW
DirectSoundEnumerateA
DirectSoundCaptureEnumerateA
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ