Static task
static1
Behavioral task
behavioral1
Sample
969eb33f69a04fd03bd5059fe61cac33_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
969eb33f69a04fd03bd5059fe61cac33_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
969eb33f69a04fd03bd5059fe61cac33_JaffaCakes118
-
Size
85KB
-
MD5
969eb33f69a04fd03bd5059fe61cac33
-
SHA1
a7273f3b48786e70540076e1c69ba93f4b717396
-
SHA256
101a97f090629aa1175a335379affa4048ce9ba859fecd726b2a27add8b675f6
-
SHA512
e9acc76473bcefc33ff1166ea783d1322ad2e1791f8ea55c28ccdba640f42a92cdc5ef566cc81a518ccc91529bde417bd945232cfb775d2b270ee6d2286bc863
-
SSDEEP
1536:Kb4Pp43jGFyBAfajEsbGX3RGvObXH4LBJElQGAZUvOikjeLBGdLrhutb3A:mGma0afONd2jSBUQGAu9AVr0zA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 969eb33f69a04fd03bd5059fe61cac33_JaffaCakes118
Files
-
969eb33f69a04fd03bd5059fe61cac33_JaffaCakes118.dll windows:4 windows x86 arch:x86
7519d40412db8f6dfe879a6d8a3aab5b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawCaption
DialogBoxParamA
DestroyCursor
DeleteMenu
CreatePopupMenu
CreateMenu
CreateMDIWindowA
CreateIconFromResource
CreateDesktopW
CreateAcceleratorTableA
CopyRect
CharToOemBuffA
CharNextA
CharLowerA
ChangeMenuA
kernel32
FindResourceA
lstrlenA
lstrcpynA
lstrcmpiA
lstrcmpA
TlsGetValue
SleepEx
Sleep
SetLastError
SetEndOfFile
SetCurrentDirectoryA
OpenFile
LoadLibraryA
LeaveCriticalSection
GetVersion
GetStartupInfoA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceTypesA
FlushFileBuffers
FreeResource
Sections
.text Size: 19KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ