Static task
static1
Behavioral task
behavioral1
Sample
968e314aa8b32ac281cbc31e27470a3f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
968e314aa8b32ac281cbc31e27470a3f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
968e314aa8b32ac281cbc31e27470a3f_JaffaCakes118
-
Size
92KB
-
MD5
968e314aa8b32ac281cbc31e27470a3f
-
SHA1
179fa77b1ec0098b6db5e0c05c217dc4e9c3e184
-
SHA256
6061cece2991dbd355b66e96f4e5cbfe469ecdc3f5e6ffd60537facf9d463d42
-
SHA512
54297338b77d855dd1262a3d704885588eacd80c80b5ba76db8bd8fdbd184f235e1271eedd7123be522ed5f1451541239de0d40ac8deb9e7fe6be64ed4a42a06
-
SSDEEP
1536:eK8VgkTrExQIeT6jrhueSqBBZSHPRFByi5oRy592GU1lGM+GiSLoSfsFcv:eK8+k3E59jrhysfSHPRVEy59bvM+nCoK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 968e314aa8b32ac281cbc31e27470a3f_JaffaCakes118
Files
-
968e314aa8b32ac281cbc31e27470a3f_JaffaCakes118.dll windows:4 windows x86 arch:x86
daf276b48697ad962ca68d7c5e397e4b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawCaption
DialogBoxParamA
DestroyMenu
DestroyCaret
CreateIconFromResourceEx
CreateIconFromResource
CreateIcon
CreateDesktopA
CharUpperBuffA
CharToOemA
CharPrevA
CharLowerA
ChangeMenuA
BeginPaint
ActivateKeyboardLayout
kernel32
CloseHandle
lstrcpyA
lstrcmpA
UnmapViewOfFile
TlsGetValue
TlsFree
LoadResource
InitializeCriticalSection
GetVersionExA
GetVersion
GetModuleHandleA
GetFileSize
FlushFileBuffers
ExitThread
EnumResourceNamesA
EnumResourceLanguagesW
Sections
.text Size: 20KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ