Static task
static1
Behavioral task
behavioral1
Sample
8d711c49325063fa9ab1c2b10c317baa_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d711c49325063fa9ab1c2b10c317baa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8d711c49325063fa9ab1c2b10c317baa_JaffaCakes118
-
Size
57KB
-
MD5
8d711c49325063fa9ab1c2b10c317baa
-
SHA1
fea61c769e8e95fcc5e334d04527da378ae17f62
-
SHA256
88439486d231b294d78bc35318999c8f1750dd17b17ec0addfe254b59f1c62eb
-
SHA512
f5edcd5e4b7cdbca100ec3fce83334b8d1eae2cccb05df8f93985c011ac1f9fbb92ec290b473107034d3259a8ea372797ce0e7bd11397fe06b208f8df8efebe6
-
SSDEEP
1536:q6l+DDOsK5a030tkrpVUEkJ+H0jYJqXoxHOTMdSg:H+Dy5avKr0EUG0jxX6OQMg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d711c49325063fa9ab1c2b10c317baa_JaffaCakes118
Files
-
8d711c49325063fa9ab1c2b10c317baa_JaffaCakes118.dll windows:4 windows x86 arch:x86
ce8a8552016dfed27baac7c3c6d69c6d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
GetLastError
FreeLibrary
LocalFree
GetModuleHandleW
GetProcAddress
LoadLibraryW
lstrcmpiW
lstrcpynW
GetCommandLineA
MultiByteToWideChar
lstrcatW
FormatMessageW
lstrcpyW
GetProfileStringW
lstrcmpA
lstrcpynA
lstrlenW
GetWindowsDirectoryW
VirtualProtect
WideCharToMultiByte
VirtualAlloc
user32
GetDlgItem
MessageBoxW
GetWindowTextW
GetWindowTextLengthW
LoadStringW
GetFocus
SetFocus
EnableWindow
SendMessageW
SetDlgItemTextW
LoadIconW
SendDlgItemMessageW
EnumDisplayDevicesW
DialogBoxParamW
EndDialog
GetWindowLongW
SetWindowLongW
MoveWindow
ScreenToClient
GetWindowRect
wsprintfW
gdi32
GetDeviceCaps
DeleteDC
msvcr71
_adjust_fdiv
_initterm
malloc
free
_onexit
_wcsdup
_wsplitpath
_wcsicmp
memmove
_except_handler3
__dllonexit
__CppXcptFilter
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ