Static task
static1
Behavioral task
behavioral1
Sample
6f2c1bf21883b33c988b39897b6aea5e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6f2c1bf21883b33c988b39897b6aea5e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6f2c1bf21883b33c988b39897b6aea5e_JaffaCakes118
-
Size
90KB
-
MD5
6f2c1bf21883b33c988b39897b6aea5e
-
SHA1
771a1c3d984575707722e7422307e2d9b6eb05d6
-
SHA256
d737e7d48b93ec0debea3a0ad6f8e628e4f6ab06012ad156d87a8af9b89eced0
-
SHA512
d995c357d60a5518658d28e961b10310509f7e0bf7c3895f13d2e9ce7d50516d6508896b91bb6d7aa673fac79463bceeb21a98a055b0e6a0d9607769fd0a73aa
-
SSDEEP
1536:cg7wOwz84LjP02434ELwxltGBnUy3Nlm7Ugu4u9hffrF3UZ1CV2m0EYPyS88NKv5:n7wOwzLjX0tLwrAB73Nlm7UgdubtVP0Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f2c1bf21883b33c988b39897b6aea5e_JaffaCakes118
Files
-
6f2c1bf21883b33c988b39897b6aea5e_JaffaCakes118.dll windows:5 windows x86 arch:x86
e76be77367b11d969df43c54d4ef86ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathAddExtensionW
UrlCreateFromPathA
user32
MessageBoxW
TranslateMessage
GetDC
DispatchMessageW
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ