Tmp2Txt
Static task
static1
Behavioral task
behavioral1
Sample
776db02574a318f7352143b6c73e1dd4_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
776db02574a318f7352143b6c73e1dd4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
776db02574a318f7352143b6c73e1dd4_JaffaCakes118
-
Size
97KB
-
MD5
776db02574a318f7352143b6c73e1dd4
-
SHA1
b6c4ca53c2c27bc0e6bcc40130c1afba48047e17
-
SHA256
c30ee0eba9c7eddfd4e7ba424d34288c4a7013cfaa1314113c4b9dd68f7db916
-
SHA512
2d151daf6c1a2aebf5beaafd0c5ab67d35fe07f7660c1e801f88d3800bad18cb5a1d39336eb88084c64a50cffed5a1cad9a4327f6a880b2c727e6e5f51204f08
-
SSDEEP
1536:xVJNokSiYJ8KvbGbqbiB0yjH3OrYXh2Wdy1I3mIgZ1Xy14bnP2KwYk:xVzHYSKvbuqbiiGMbWs17Igra4bP2Kw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 776db02574a318f7352143b6c73e1dd4_JaffaCakes118
Files
-
776db02574a318f7352143b6c73e1dd4_JaffaCakes118.dll windows:1 windows x86 arch:x86
a0a7bf1f782a72946e28ba652e58cae9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
SetBkColor
SetTextColor
SelectObject
DeleteObject
CreateSolidBrush
user32
MessageBoxA
GetDC
DrawTextA
FrameRect
FillRect
ReleaseDC
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
ShowWindow
UpdateWindow
UnregisterClassA
DestroyWindow
kernel32
VirtualAlloc
VirtualFree
GetCPInfo
GetOEMCP
GetACP
WriteConsoleA
GetEnvironmentVariableA
WideCharToMultiByte
GetFileType
GetLastError
RtlUnwind
SetConsoleCtrlHandler
MultiByteToWideChar
ExitProcess
GetTimeZoneInformation
ReadFile
WaitForSingleObject
CreateFileA
ReleaseSemaphore
CreateSemaphoreA
GetStdHandle
SetFilePointer
GlobalAlloc
WriteFile
GlobalFree
SetUnhandledExceptionFilter
RaiseException
GetStringTypeA
GetTickCount
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
GetLocalTime
LCMapStringA
GetVersion
GetCurrentThreadId
Exports
Exports
Sections
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_TEXT Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.CRT$XIA Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 28B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE