Static task
static1
Behavioral task
behavioral1
Sample
882238f456f762797faa8681acd2b7fe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
882238f456f762797faa8681acd2b7fe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
882238f456f762797faa8681acd2b7fe_JaffaCakes118
-
Size
312KB
-
MD5
882238f456f762797faa8681acd2b7fe
-
SHA1
6e93880242f74933606fb03018e155e62fe343e9
-
SHA256
137191ee830e57b4cd4174d7050f562c25ad155ef2bdf6c6f0fbbeaecfa3843d
-
SHA512
6b8cf9768d5a6317ef0c52babc7ba071f018eefd3fd64b7428d60e3e5cadab124336603b3cd916b6a489e28d58ef0dd684a619fe5c96397d001b862410996765
-
SSDEEP
6144:IKWgj9yBUL5qISg89W+EJDmdxcfB00VS7vWHoz3+VR0Cq+vEiT3XE:eg6U9HSg89pq6dxQO6BIzHqvEir0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 882238f456f762797faa8681acd2b7fe_JaffaCakes118
Files
-
882238f456f762797faa8681acd2b7fe_JaffaCakes118.dll windows:4 windows x86 arch:x86
74dce993e709602743e20aa1c972eac9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DestroyWindow
DestroyMenu
DestroyIcon
CreatePopupMenu
CreateMDIWindowA
CreateDesktopW
CharUpperBuffA
CharUpperA
kernel32
GetStartupInfoA
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
VirtualFree
SleepEx
SetCurrentDirectoryA
EnterCriticalSection
EnumResourceLanguagesW
FreeResource
GetCommandLineA
GetPrivateProfileStringA
LoadLibraryA
LoadResource
RaiseException
ReadFile
Sections
.text Size: 69KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 238KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ