Static task
static1
Behavioral task
behavioral1
Sample
8a1c652cee2bc977c683d823d179bd4e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a1c652cee2bc977c683d823d179bd4e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8a1c652cee2bc977c683d823d179bd4e_JaffaCakes118
-
Size
50KB
-
MD5
8a1c652cee2bc977c683d823d179bd4e
-
SHA1
f3264ad08d9898948f483817ca33157939d804cd
-
SHA256
4bd46c2fc2b16b8b57ec2d22213bab2b74dcbb8ebb6b2cb04f6942c4d5c66905
-
SHA512
387b24251c7134472c5161e5d9b2a502af8c54ae06e97be579a68fe5df9c138e99a364f8c4af0fef2b3876b80f195214189c25474780f2c6e26d07b852ee2a17
-
SSDEEP
768:W8GfME/qSHQGpo/UQoIfs3QL1Stuf0G+xR8EWkE+8qbXApDUatEzGow+/aEUHI:WBfySHQJ/vhSDG+HXApYl5w+yDH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a1c652cee2bc977c683d823d179bd4e_JaffaCakes118
Files
-
8a1c652cee2bc977c683d823d179bd4e_JaffaCakes118.dll windows:5 windows x86 arch:x86
2abf9b752cac1374ff108c6838aef338
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrFormatKBSizeW
PathAddBackslashW
PathBuildRootW
user32
MessageBoxW
DispatchMessageW
TranslateMessage
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RCODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE