Static task
static1
Behavioral task
behavioral1
Sample
788ce73c4476934012515d8b53104842_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
788ce73c4476934012515d8b53104842_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
788ce73c4476934012515d8b53104842_JaffaCakes118
-
Size
110KB
-
MD5
788ce73c4476934012515d8b53104842
-
SHA1
f397b9bc48769c66d9c98374b2ea44b519f09a64
-
SHA256
c68e41a22ca95d21f5ddbf67f2b2e2aadbe777f91a8e9d5422bac2b7d663e9f7
-
SHA512
b41a3a6e68f5c8d2610e705ed63b605d0154d112ecf1c8e94fcb192ecf0f9643652b478ed76a3576d82ce0a83b13d3238ea9e668ba26b3dafe470aa3b57796e0
-
SSDEEP
1536:ZWKTGq50yrb9pn5pTYA4NYMf22j9bg8HdClV2fqUGjj+AYjWwlbx00AFg55q59:RTGq5D9p5pONYkFO890XUfDjrlbX4/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 788ce73c4476934012515d8b53104842_JaffaCakes118
Files
-
788ce73c4476934012515d8b53104842_JaffaCakes118.dll windows:4 windows x86 arch:x86
de148f3a6addb89c494d4df323ee106c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dinput
DirectInputCreateW
DirectInputCreateA
dsound
DirectSoundCaptureCreate
DirectSoundCreate
DirectSoundFullDuplexCreate
DirectSoundCreate8
shell32
SHBindToParent
SHGetPathFromIDListA
ShellExecuteExW
SHFileOperationA
user32
CreateIconFromResourceEx
CreateDesktopW
CreateCursor
CreateAcceleratorTableA
CopyImage
DefDlgProcA
CharToOemBuffA
CharPrevA
CharNextA
BeginPaint
wsprintfA
DeleteMenu
EnableMenuItem
EndPaint
ShowScrollBar
ShowCaret
MessageBoxA
GetFocus
CharUpperA
LoadAcceleratorsW
LoadCursorA
kernel32
CompareStringA
EnumResourceLanguagesW
lstrcpyA
lstrcmpA
WriteFile
TlsFree
SleepEx
Sleep
SetUnhandledExceptionFilter
RtlUnwind
ReadFile
RaiseException
InitializeCriticalSection
GetVersionExA
GetTimeFormatA
GetSystemTimeAsFileTime
GetStartupInfoA
GetPrivateProfileStringA
GetModuleHandleA
GetLocalTime
GetDateFormatA
GetCommandLineA
FindResourceA
ExitProcess
CloseHandle
Sections
.text Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ