Static task
static1
Behavioral task
behavioral1
Sample
74367c05c5a99a578ae0c115ac783457_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
74367c05c5a99a578ae0c115ac783457_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
74367c05c5a99a578ae0c115ac783457_JaffaCakes118
-
Size
58KB
-
MD5
74367c05c5a99a578ae0c115ac783457
-
SHA1
bc758a474438741a00ddf06466f81b935d5ca8b4
-
SHA256
4da9305b4dd27a41999cd6a6c2414e1433f94251a9f98572f7f1d800887eeb00
-
SHA512
2859c1a1ff183d82618c8583c12e7f9a90ffa2d6eadeff4bfd8f85fdd9d5ce4446ab50e1fa4976d117cb935c4e4b8f2a133766430c6ecadc8cd59337df7c5167
-
SSDEEP
768:J8NPfVlmvdDQO1sCjSbEcM1z8Qh9nk+hz3u+8xKPrT+GtrhzmEbUWAlW6cSD:JOnyKolmbUgInk+hK+TrTfvzmEbBAlDD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74367c05c5a99a578ae0c115ac783457_JaffaCakes118
Files
-
74367c05c5a99a578ae0c115ac783457_JaffaCakes118.dll windows:4 windows x86 arch:x86
42a7eee39c86bdbd05ce4a5a92c93623
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawIcon
DestroyCursor
DestroyCaret
DefDlgProcA
CreateMDIWindowA
CreateIconFromResourceEx
CreateIcon
CreateDialogParamA
CreateDialogIndirectParamA
CreateDesktopW
CreateDesktopA
CopyRect
CharUpperBuffA
CharToOemA
CharLowerA
kernel32
EnumResourceTypesA
lstrcpyA
lstrcmpiA
lstrcmpA
VirtualAlloc
UnmapViewOfFile
TlsFree
SleepEx
SetEndOfFile
RtlUnwind
ReadFile
MapViewOfFile
LoadLibraryA
InitializeCriticalSection
GetVersionExA
GetLocalTime
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE