Static task
static1
Behavioral task
behavioral1
Sample
73316891c0ea71e942036968206b7a1b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73316891c0ea71e942036968206b7a1b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
73316891c0ea71e942036968206b7a1b_JaffaCakes118
-
Size
88KB
-
MD5
73316891c0ea71e942036968206b7a1b
-
SHA1
959d6b7ef486742ff95d46ebdb51e25da2644597
-
SHA256
b90d0e868ee811da39697e3987698ddcc24d2531efe8ad908de5d0855897d5d6
-
SHA512
23d432e642e55aa0078c4bbc8814b1be15c61e6db86b7b618ed4396123486daace9fe14159ea34ee56c62845470ab4bb4168a04d6398db818992735cae597eee
-
SSDEEP
1536:DmWNVBJMoQ3k92qxeN7zd3D4BygxWhJV2XAXPiC8nGBSwL2Hf9IGGPa70QW4sTel:FNVzMZk9HeNfR6yqeqAKF//9701il0Q9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73316891c0ea71e942036968206b7a1b_JaffaCakes118
Files
-
73316891c0ea71e942036968206b7a1b_JaffaCakes118.dll windows:4 windows x86 arch:x86
1d545518ccf6eb6fd3b6c97b061208c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
IsCharUpperA
LoadBitmapA
LoadCursorFromFileA
LoadMenuA
MessageBeep
GetMessageA
OemToCharBuffA
SetMenuInfo
ShowCaret
ToAscii
GetFocus
GetCursor
EqualRect
EnableWindow
EnableScrollBar
DrawTextA
DrawIcon
DrawCaption
DeleteMenu
CreateMenu
CreateDesktopW
CharNextA
ChangeMenuA
BeginPaint
MessageBoxIndirectA
ActivateKeyboardLayout
kernel32
lstrcmpA
GetLocalTime
GetSystemTimeAsFileTime
SetCurrentDirectoryA
Sleep
TlsFree
GetCommandLineA
WriteFile
oleaut32
RegisterTypeLib
SafeArrayAllocData
SafeArrayCreate
SysStringLen
OleIconToCursor
VarBstrCmp
Sections
.text Size: 18KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ