QD2GDI
Static task
static1
Behavioral task
behavioral1
Sample
8694eaef81ac819229950e07e2e23fab_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8694eaef81ac819229950e07e2e23fab_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8694eaef81ac819229950e07e2e23fab_JaffaCakes118
-
Size
89KB
-
MD5
8694eaef81ac819229950e07e2e23fab
-
SHA1
a72eb4117278970be7fa50e179567fd6c11d3470
-
SHA256
338ab47bfa2f2e4d827a99d67e6524a780476158074a48d97f8c9896c035445c
-
SHA512
4a159b74ae0d59a135ed6a4751f362e90e52deed0a4d8549c5ca907f935d4678efcaaa82133546ee2a38ef232897ab613922429f3e0d6c5594690392f159d34d
-
SSDEEP
1536:oUuEHCbBzX3FeZ0I/D6EOhzO4SPaXvZP+uAjcwlIAFaxAtpPm1IC0BOJ5z:oBFzXYZszO4+a/gLcQexAjPm1S0J5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8694eaef81ac819229950e07e2e23fab_JaffaCakes118
Files
-
8694eaef81ac819229950e07e2e23fab_JaffaCakes118.dll windows:5 windows x86 arch:x86
7d93fe5a1886e7569a2a61f95a2a7756
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_ftol
kernel32
lstrlenA
GetVersion
lstrcmpiA
lstrcpyA
lstrcmpA
GlobalReAlloc
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
gdi32
CreatePenIndirect
PolyPolygon
ExcludeClipRect
StretchDIBits
TextOutA
CreateMetaFileA
CreateICA
EnumFontsA
CloseMetaFile
DeleteDC
DeleteMetaFile
SetWindowExtEx
Escape
SetWindowOrgEx
CreatePen
GetStockObject
DeleteObject
SaveDC
RestoreDC
SelectObject
Polyline
Pie
Arc
Ellipse
RoundRect
Rectangle
Polygon
LineTo
MoveToEx
IntersectClipRect
SetBkColor
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
SetTextCharacterExtra
user32
IsCharAlphaNumericA
IntersectRect
EqualRect
OffsetRect
wsprintfA
IsCharAlphaA
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ