Static task
static1
Behavioral task
behavioral1
Sample
8dd7c24260dfd2b0fd55c82e1f7482f9_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8dd7c24260dfd2b0fd55c82e1f7482f9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8dd7c24260dfd2b0fd55c82e1f7482f9_JaffaCakes118
-
Size
90KB
-
MD5
8dd7c24260dfd2b0fd55c82e1f7482f9
-
SHA1
a1f8d9a2aae1d3eac9d2da44fc5aa62646e6b9d6
-
SHA256
7110380ab7578c3a5d73c62e7859c78e9da6b50d7191e1dccd8fbf80510a6695
-
SHA512
68d286d2a4e14cf2d62dd2a8ff7bdc6620a30bae3c3be8ad0956dc4de90f97bd2081d89995a5c768c6f1acd62780797e6afcec5c8996804430e2db38b3519777
-
SSDEEP
1536:n+eFD/mszjdoIGYS22VluMSWevG+vJYokrEyq+2EQxXwl31fHOVSdEYqAOSXOCzH:n+eFDOkoIGYUDuvhvJHkVqE6wffuKEYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dd7c24260dfd2b0fd55c82e1f7482f9_JaffaCakes118
Files
-
8dd7c24260dfd2b0fd55c82e1f7482f9_JaffaCakes118.dll windows:4 windows x86 arch:x86
9f4aa2dcc86d1340fc311e19f45f46b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowCursor
LoadCursorFromFileA
LoadAcceleratorsA
GetDlgItem
EndPaint
EndMenu
DispatchMessageA
DestroyCursor
DeleteMenu
CreatePopupMenu
CreateMDIWindowA
CreateIconFromResourceEx
CopyRect
CloseWindow
ChangeMenuA
kernel32
FlushFileBuffers
GetSystemTime
ExitThread
EnumResourceLanguagesA
LocalAlloc
MapViewOfFile
OpenFile
lstrcpynA
lstrcmpA
lstrcatA
TlsSetValue
SetCurrentDirectoryA
GetTimeFormatA
oleaut32
SafeArrayAllocData
SysReAllocString
SysStringLen
VarBstrCmp
RegisterTypeLib
OleLoadPicture
Sections
.text Size: 18KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ