Static task
static1
Behavioral task
behavioral1
Sample
726083d23268f75b2f465ecd0d0b6626_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
726083d23268f75b2f465ecd0d0b6626_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
726083d23268f75b2f465ecd0d0b6626_JaffaCakes118
-
Size
102KB
-
MD5
726083d23268f75b2f465ecd0d0b6626
-
SHA1
46142ac01158126cf4bd1db14fabc630248f8daf
-
SHA256
661b29cffc884dfe6a54a8b32bbcee396d64f583e8d6c9362e8b56da1bc8ce72
-
SHA512
95cbedf7da4cb5e0921f976c7634856637fc0704f11a3484079b54fe990d98c9417b33add8d945f3c383b15d5b0b04b8c93a406f2ca68ba2d84b9763266009e1
-
SSDEEP
3072:VoHEZ21Uiv2iXR1ISOnwuJ0QVrJ/Sz3Hglh:VzcSiaS9Y07zXYh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 726083d23268f75b2f465ecd0d0b6626_JaffaCakes118
Files
-
726083d23268f75b2f465ecd0d0b6626_JaffaCakes118.dll windows:4 windows x86 arch:x86
52948b2d7dcf3f4adb2cc882933d5344
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowOwnedPopups
GetMessageA
EqualRect
DialogBoxParamA
CreateMDIWindowA
kernel32
TlsFree
lstrcpynA
lstrcmpA
VirtualAlloc
TlsGetValue
TlsAlloc
EnumResourceLanguagesA
GetVersionExA
LoadLibraryA
MapViewOfFile
SetEndOfFile
oleaut32
RegisterTypeLib
SafeArrayCreate
SysReAllocString
SysStringLen
OleTranslateColor
ClearCustData
Sections
.text Size: 26KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ