Static task
static1
Behavioral task
behavioral1
Sample
87749eddcbf9540bb29ed9c41ddae9ce_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
87749eddcbf9540bb29ed9c41ddae9ce_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
87749eddcbf9540bb29ed9c41ddae9ce_JaffaCakes118
-
Size
50KB
-
MD5
87749eddcbf9540bb29ed9c41ddae9ce
-
SHA1
b4bbfd99c4abaa122cfadd5cbd458e43e65d5ae2
-
SHA256
862709a93095f7ac5f717232f1a324e367e84a978b115a461c02f9c1cb9ff520
-
SHA512
98a88fa4f31e8535a2cc3d6212e0ae83115e9ce54d29d638783109596d0e92c95bb8b7ea78f8e4893414bbd7c835f184b69110cc655f636e3b84543e59d1e901
-
SSDEEP
768:OQNjbbXJuI4YoHn8pV8QbvwL7EKCmu+caXU31lKlPSZcOjWTnAOqaX2:OgjX0fH8vvaCmjpsKlPStIA5G2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87749eddcbf9540bb29ed9c41ddae9ce_JaffaCakes118
Files
-
87749eddcbf9540bb29ed9c41ddae9ce_JaffaCakes118.dll windows:5 windows x86 arch:x86
2abf9b752cac1374ff108c6838aef338
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrFormatKBSizeW
PathAddBackslashW
PathBuildRootW
user32
MessageBoxW
DispatchMessageW
TranslateMessage
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RCODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE