Static task
static1
Behavioral task
behavioral1
Sample
a53ea6cbb7ebf404a2e77656d305eaa3_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a53ea6cbb7ebf404a2e77656d305eaa3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a53ea6cbb7ebf404a2e77656d305eaa3_JaffaCakes118
-
Size
32KB
-
MD5
a53ea6cbb7ebf404a2e77656d305eaa3
-
SHA1
83d2ed7f51934d0dc11d661797897aed81724b21
-
SHA256
3d15d232d18cb08a5fccd31c4b68250757c66837923e53598a6b7f5a25c02f75
-
SHA512
7c724c458939f64d418706ca16ff1a153de8d1266a446f61bde1bac417867a2378728d4b52567255930dc062fb4dca9cffe7e4714e47341187cd326a41573066
-
SSDEEP
384:HtvxhHYG+YAy1iLbc2l1oIptcrklquXlS1Hf0V2fpio4MkZSrMl4dRrRU9g+HVmU:HtoYA3HpZpSfZhmFZSrg+HUHV5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a53ea6cbb7ebf404a2e77656d305eaa3_JaffaCakes118
Files
-
a53ea6cbb7ebf404a2e77656d305eaa3_JaffaCakes118.dll windows:4 windows x86 arch:x86
7cba45f63eb715e9b7afeb356c79fe0d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CheckRadioButton
CopyIcon
CreateMenu
CreateWindowExA
DestroyCursor
DestroyIcon
DestroyWindow
EndPaint
ExitWindowsEx
FindWindowExA
GetCapture
GetCursorPos
GetDC
GetDesktopWindow
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowTextA
GetWindowTextLengthA
InvalidateRect
IsWindow
KillTimer
LoadCursorA
LoadIconA
LoadIconA
LoadStringA
MessageBoxA
PeekMessageA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE