Static task
static1
Behavioral task
behavioral1
Sample
69b68f3b9fbf2346b99c7932584e285b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69b68f3b9fbf2346b99c7932584e285b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
69b68f3b9fbf2346b99c7932584e285b_JaffaCakes118
-
Size
90KB
-
MD5
69b68f3b9fbf2346b99c7932584e285b
-
SHA1
f38aa18588f35e7ac1b474fcd704bf1569a21b1e
-
SHA256
9cdc9b33e2b00071c97a2e64163f44ee0882a8dc48ea2d01b1a7bf469df6c760
-
SHA512
a9332c1d419f3b61617395d2aac032d9c1c8b89b28968b3f424288cb4b9df997fab179390c5d0c381cd0b67074d8a7388f5fb2b909e6343e5e772b20d9cc5799
-
SSDEEP
1536:6wt724ylArh2VU+4ErJ9rVUCVdpvA0Wvs0kjQUS2eHDv3xxm1Nmo4nnbyx:6q9hvw/UC7plus0ksUSdDv3xxm+o4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69b68f3b9fbf2346b99c7932584e285b_JaffaCakes118
Files
-
69b68f3b9fbf2346b99c7932584e285b_JaffaCakes118.dll windows:5 windows x86 arch:x86
26c2ac6ea7446dc47b7bc56894882c9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCreateFromPathA
UrlCombineW
user32
TranslateMessage
SendMessageA
MessageBeep
DialogBoxIndirectParamA
MessageBoxW
GetDC
DispatchMessageW
advapi32
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ