Static task
static1
Behavioral task
behavioral1
Sample
68f259ab3db984413dd1b93400f8587f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68f259ab3db984413dd1b93400f8587f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
68f259ab3db984413dd1b93400f8587f_JaffaCakes118
-
Size
364KB
-
MD5
68f259ab3db984413dd1b93400f8587f
-
SHA1
50737314c908270468a1721b91f33d5ccfe852f4
-
SHA256
27982ab9299631226d71239675b347217bccdef9643fd1fd7647f67d24d62862
-
SHA512
9c1103fb33b84767c598406faf5fb625d01182a0e2506ca5d69cc29cf960cecaa427af1f60d3098cf942b9931eb368b6b23ccff4e4035396c6bbbefd2867d668
-
SSDEEP
6144:M1mF84IPp9B3rbUn15cObZi6CQUjINTk1UfDmPbwMluSqCLSFXGx8PMWgUm:42gh9dvywWYQUjINTk1UfDt72SPM9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68f259ab3db984413dd1b93400f8587f_JaffaCakes118
Files
-
68f259ab3db984413dd1b93400f8587f_JaffaCakes118.dll windows:4 windows x86 arch:x86
ced231044499560bda0c462c28bafdf3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CreateDialogIndirectParamA
CreateIconFromResource
CreateIconFromResourceEx
CreatePopupMenu
DefDlgProcA
CreateCursor
DrawCaption
DrawMenuBar
EmptyClipboard
EnableWindow
EndMenu
CreateAcceleratorTableA
CopyImage
CloseWindow
CharUpperBuffA
CharUpperA
CharToOemA
DestroyMenu
CharPrevA
kernel32
VirtualFree
RaiseException
InitializeCriticalSection
FindResourceA
EnumResourceNamesA
EnumResourceLanguagesA
lstrcmpA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 169KB - Virtual size: 430KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE