Static task
static1
Behavioral task
behavioral1
Sample
777e0f86ae5de7a9955c13a73f60d832_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
777e0f86ae5de7a9955c13a73f60d832_JaffaCakes118.dll
Resource
win10v2004-20240729-en
General
-
Target
777e0f86ae5de7a9955c13a73f60d832_JaffaCakes118
-
Size
60KB
-
MD5
777e0f86ae5de7a9955c13a73f60d832
-
SHA1
28bcd1e7535bc22e37fffa845686ad85127f89b0
-
SHA256
2567c103fe4488264dc0c6f42be669ac6f8f30121768dcd1a9d416516d8a4196
-
SHA512
ea998aabdfc25e58ff5ef02433b564840cbadbdc5fdf648c2b60a464790bc7b0491deb63100fc9daa9216c2b464ed52b6642e3a62faf9d22b49739f3e29a5204
-
SSDEEP
1536:d8EnMqhdfAM2bV2CyllfAhvglFEv4Ent/6Y+w:d8YMqhP2blKAhYlFitiY+w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 777e0f86ae5de7a9955c13a73f60d832_JaffaCakes118
Files
-
777e0f86ae5de7a9955c13a73f60d832_JaffaCakes118.dll windows:4 windows x86 arch:x86
0380a00e9a00ffdc03a97c8241595930
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ToAscii
FillRect
kernel32
LoadLibraryW
SetHandleCount
ExitProcess
FreeEnvironmentStringsW
GetACP
GetEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
LocalFree
advapi32
RegSetValueExW
RegCloseKey
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dataa Size: 22KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ