Static task
static1
Behavioral task
behavioral1
Sample
a0d1cd22444379e8b623559ddcd30925_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0d1cd22444379e8b623559ddcd30925_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a0d1cd22444379e8b623559ddcd30925_JaffaCakes118
-
Size
61KB
-
MD5
a0d1cd22444379e8b623559ddcd30925
-
SHA1
2cab49114ec05bdc9c8567093c82ad47b9a65f0e
-
SHA256
718fa3148c63078a0ccdadebb84c04c76c6412f33c2f57e54cee0231a9978772
-
SHA512
c9be8bf5143d8fa2feec5dfae87c374c465f45e6369e7497f71eda5ca40762d582c9546f899c2bab4e0b281f2c6ce9c7a58d69261db743be902183c1364c2225
-
SSDEEP
1536:BDuCX5yYFoPiu0+475m9+1WIUjwyr974g/cSg55q59:LrYs375WI4v9748cB4/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0d1cd22444379e8b623559ddcd30925_JaffaCakes118
Files
-
a0d1cd22444379e8b623559ddcd30925_JaffaCakes118.dll windows:4 windows x86 arch:x86
187af72e4da7c0bf8c36f5d16ab9523a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dinput
DirectInputCreateEx
DirectInputCreateW
DirectInputCreateA
user32
CloseWindow
SetFocus
SetCursor
CharToOemBuffA
dsound
DirectSoundCaptureCreate
DirectSoundEnumerateW
shell32
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
ShellExecuteExW
ShellExecuteExA
SHGetPathFromIDListA
kernel32
CloseHandle
lstrcpyA
lstrcmpA
lstrcatA
SetUnhandledExceptionFilter
SetLastError
SetCurrentDirectoryA
OpenFileMappingA
LocalAlloc
GetTimeFormatA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetLastError
GetDateFormatA
GetCommandLineA
FlushFileBuffers
ExitProcess
EnumResourceTypesA
EnterCriticalSection
Sections
.text Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ