Static task
static1
Behavioral task
behavioral1
Sample
8a1bd1221a322fd6e3c1989e37c593fc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8a1bd1221a322fd6e3c1989e37c593fc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8a1bd1221a322fd6e3c1989e37c593fc_JaffaCakes118
-
Size
106KB
-
MD5
8a1bd1221a322fd6e3c1989e37c593fc
-
SHA1
5287a9da7793150559b7acb9cb3a63750dbef567
-
SHA256
b531c0d8a3b7ce8497e5ad8020eb2ec5144e5579df979435a60d981cfea9a46a
-
SHA512
4a1c04c49d3c3bed9b69f21d67b7cb60fbcf8a797cf7fc358ede3cf447aa6bca1cde6a9664222e1cece810cd29ab4ac334dd1c81e8faec875b533fdddf2c1d2c
-
SSDEEP
1536:2uZdErusxkGkNCJyr35dmQfnR+7lN6FAr6ADa0f1kmU3BA+GCUmnvACR:2WdEysaGerpdmIsCAx5fHoBAjH+T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a1bd1221a322fd6e3c1989e37c593fc_JaffaCakes118
Files
-
8a1bd1221a322fd6e3c1989e37c593fc_JaffaCakes118.dll windows:4 windows x86 arch:x86
40687e2d86edbb2aeb9d50861c192532
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
SetMenuInfo
LoadCursorA
GetDC
DrawTextA
DestroyWindow
DefDlgProcA
CreatePopupMenu
CreateMenu
CreateMDIWindowA
CreateIconFromResourceEx
CreateIconFromResource
CreateDesktopW
CopyImage
CharToOemBuffA
ChangeMenuA
wsprintfA
kernel32
GetStartupInfoA
LoadResource
GetVersion
GetSystemTimeAsFileTime
GetSystemTime
GetModuleHandleA
GetDateFormatA
FlushFileBuffers
FindResourceA
lstrcmpA
VirtualFree
TlsSetValue
TlsFree
TlsAlloc
SetEndOfFile
OpenFile
CloseHandle
EnumResourceLanguagesA
MapViewOfFile
oleaut32
OleIconToCursor
OleLoadPicturePath
RevokeActiveObject
SafeArrayAllocDescriptor
SafeArrayDestroy
SysReAllocString
VarBstrCmp
ClearCustData
Sections
.text Size: 28KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ