Static task
static1
Behavioral task
behavioral1
Sample
6624508af4a1392e2b43247f5a00d522_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6624508af4a1392e2b43247f5a00d522_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6624508af4a1392e2b43247f5a00d522_JaffaCakes118
-
Size
90KB
-
MD5
6624508af4a1392e2b43247f5a00d522
-
SHA1
53713eaa1449cfc8a68f96c9585e3406634293ad
-
SHA256
e4508159f486918866f8487967ceaf390d52f206b0ab974a3b4e1b0a515c885d
-
SHA512
dc21cad85597f2bf6c652186cecd3d9e4b5fb4bd5698fd86524b73daea46a901537b89ef55d2a5650680ae801f5c376eed36c0832cc7b31bf2378d92b2cc4384
-
SSDEEP
1536:+OJp1bQpsZ+CLH9lycgehJapToTMHx8lpDB8SdMiisO0A9sHSUx:+q1bksZNLH9lycgWmd8lJCSdI/UHZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6624508af4a1392e2b43247f5a00d522_JaffaCakes118
Files
-
6624508af4a1392e2b43247f5a00d522_JaffaCakes118.dll windows:5 windows x86 arch:x86
ef2e2a1802facba2c81e2109a90d9b87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCombineW
UrlHashW
UrlGetLocationW
UrlGetPartW
UrlUnescapeW
user32
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
DispatchMessageW
TranslateMessage
advapi32
RegOpenKeyA
Sections
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.R Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ