Static task
static1
Behavioral task
behavioral1
Sample
a84f4b27378bdbc0ca6c85b9e76b707a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a84f4b27378bdbc0ca6c85b9e76b707a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a84f4b27378bdbc0ca6c85b9e76b707a_JaffaCakes118
-
Size
86KB
-
MD5
a84f4b27378bdbc0ca6c85b9e76b707a
-
SHA1
ecec5a4e969e9d27aef10e7c3ff086b0990cb579
-
SHA256
6d7ca9fc9a63176612a753e732a2e80f955f8be970aca5b288a40b61c86f11c7
-
SHA512
ca452751c93d1329fac730ddb71ad542423d4be36bec410cc059d41f02aeaf273b576f9aff30aa55aaf94eebbf3edf7a24cc47da906f282616b4decd11b3101f
-
SSDEEP
1536:3nbB9uKA9jD2c5xn8I7PtVbdk18gNd/5hpwygdB0gVfs5STIooNTIplu:LB9FA9uqx8IBVhkugNp5zednySMooep4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a84f4b27378bdbc0ca6c85b9e76b707a_JaffaCakes118
Files
-
a84f4b27378bdbc0ca6c85b9e76b707a_JaffaCakes118.dll windows:5 windows x86 arch:x86
ae372eb903cd64eb97ddf1c8af7f439b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathBuildRootA
PathAppendW
PathBuildRootW
user32
MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE