Static task
static1
Behavioral task
behavioral1
Sample
870e547c72fd2f66a187ca5f609fad25_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
870e547c72fd2f66a187ca5f609fad25_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
870e547c72fd2f66a187ca5f609fad25_JaffaCakes118
-
Size
55KB
-
MD5
870e547c72fd2f66a187ca5f609fad25
-
SHA1
fc682e6826d1452193ca491d4422676302ed94a2
-
SHA256
9d4a80fbc4c6fd7c5dd387c85bf25a5830d0387d73b95679fb2c21c343abff4e
-
SHA512
7e66c8d9663d4d23f5a7cabe8b510ce2380f69c19822ceca2378c992977ef710cdce40a92178b893bf949232da389847992a9c28ea29720be52c081e193690e7
-
SSDEEP
1536:c44tsmt8VsIapp87I8HP3ttnWvvR7DowUe+M:WHaet8Dtt6v+wr+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 870e547c72fd2f66a187ca5f609fad25_JaffaCakes118
Files
-
870e547c72fd2f66a187ca5f609fad25_JaffaCakes118.dll windows:4 windows x86 arch:x86
b8b4ffd3f2ac0701c466eae53c09b9f1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ToAscii
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
kernel32
GetFileType
GetModuleHandleW
GetEnvironmentStringsW
FreeLibrary
ExitProcess
HeapCreate
TlsGetValue
LocalFree
GetTickCount
advapi32
RegQueryValueExW
RegEnumValueW
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ