Static task
static1
Behavioral task
behavioral1
Sample
96a81e9126101d3a01cb9224a9e5eae8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
96a81e9126101d3a01cb9224a9e5eae8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
96a81e9126101d3a01cb9224a9e5eae8_JaffaCakes118
-
Size
37KB
-
MD5
96a81e9126101d3a01cb9224a9e5eae8
-
SHA1
a96eca128812dd9ab4aa10bd4a0eb7bd59af6513
-
SHA256
28039b278dc4f168d0a862e0110098c199f5be59efffb0431dfde27d679f8af7
-
SHA512
287d6d4debb7d7d2b4389be0aa96a799de34476ad1ede56b692c991a772cdf2c829d4d0e1ea37a44f3bc6ea99e8b1414caf422972744497c1912fbbc6c0977f7
-
SSDEEP
768:H+BsasIsbzCqmWRNRJLIUF/ahSs/jglAMNB+:eSasI+GqmMNLI4SsskNN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96a81e9126101d3a01cb9224a9e5eae8_JaffaCakes118
Files
-
96a81e9126101d3a01cb9224a9e5eae8_JaffaCakes118.dll windows:4 windows x86 arch:x86
1966ff5ffabdd96a7e6b23c26b7b6c13
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
OemToCharW
MessageBoxIndirectA
EndDeferWindowPos
DrawMenuBar
DestroyWindow
CopyRect
CharToOemA
ChangeMenuA
kernel32
MapViewOfFile
SetEndOfFile
OpenFileMappingA
FreeResource
FindResourceA
EnumResourceTypesA
lstrlenA
lstrcpynA
EnterCriticalSection
TlsAlloc
oleaut32
SafeArrayAllocDescriptor
SysFreeString
SysStringLen
SafeArrayAllocData
OleLoadPicturePath
Sections
.text Size: 17KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ