Static task
static1
Behavioral task
behavioral1
Sample
85f769c9768a99834631237e9b398cb9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
85f769c9768a99834631237e9b398cb9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
85f769c9768a99834631237e9b398cb9_JaffaCakes118
-
Size
150KB
-
MD5
85f769c9768a99834631237e9b398cb9
-
SHA1
3a810631ad551b5eb49856d4b2a051f2bec86723
-
SHA256
3624799a18b7eaf0fcbf7f810d2e315282a0878266c6d9f3a135aca3af6db3b8
-
SHA512
2a7f9a9278f094a7117d7cd752b8cc162fe637362124413d98fc44df0804075ca6b739a0335bc7ce369fca3d915c1df3e2e8e5355accc681944571763d846c56
-
SSDEEP
3072:3xLf9oQS6whbgVK47zJn3nRWjA96r5nWWwhCmdI+9w:3xLfA6whbgXzJ3sjqAnoDm+9w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85f769c9768a99834631237e9b398cb9_JaffaCakes118
Files
-
85f769c9768a99834631237e9b398cb9_JaffaCakes118.dll windows:5 windows x86 arch:x86
a03f83718bd76f2733568304a874b09a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetCursorPos
msvcp90
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
msvcr90
free
gdi32
DeleteDC
advapi32
RegOpenKeyA
Sections
.MPRESS1 Size: 147KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE