Static task
static1
Behavioral task
behavioral1
Sample
9574b9a73d6215cd5bc23aa45ecfa63a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9574b9a73d6215cd5bc23aa45ecfa63a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
9574b9a73d6215cd5bc23aa45ecfa63a_JaffaCakes118
-
Size
129KB
-
MD5
9574b9a73d6215cd5bc23aa45ecfa63a
-
SHA1
c99c0e391fef08883b459556335003b0c4d948c4
-
SHA256
1e4238f864e85ca84dc12018caf6c5c1e812004495f972fe5745dfe3aae6d8ab
-
SHA512
c317d63ed3c092cd23345aa75b0416bfc40cef9f325a7837f3be24d0c0ea43867f950be6c3b6090872993888fba594aeee7fc4e1f89a7c666a06c431801a1b2c
-
SSDEEP
3072:S3hMkZiWoWGD0FL4x+z1ZewBEQ41G1j2o/n:YykzGoFL4MfewEH2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9574b9a73d6215cd5bc23aa45ecfa63a_JaffaCakes118
Files
-
9574b9a73d6215cd5bc23aa45ecfa63a_JaffaCakes118.dll windows:4 windows x86 arch:x86
fd4fbff25564df8cb721b12915701379
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapAlloc
HeapCreate
HeapSize
LCMapStringA
SetEvent
CreateFileA
msvcrt
__p__commode
__set_app_type
_cexit
srand
sscanf
strspn
time
_XcptFilter
user32
DrawIconEx
GetClassNameA
GetSubMenu
GetSystemMetrics
GetWindowPlacement
OffsetRect
TrackPopupMenuEx
TranslateMessage
DefMDIChildProcA
RedrawWindow
oleaut32
SafeArrayDestroy
SetErrorInfo
SysFreeString
SysReAllocString
SysStringLen
VarBstrCmp
RegisterTypeLi
shlwapi
PathBuildRootA
PathAppendA
PathFileExistsA
SHDeleteKeyA
SHDeleteValueA
SHQueryInfoKeyA
StrSpnA
StrStrIA
StrToIntA
SHDeleteEmptyKeyA
Sections
.text Size: 63KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ