Static task
static1
Behavioral task
behavioral1
Sample
abbb8c32e31456ed12f339dde741e36b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
abbb8c32e31456ed12f339dde741e36b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
abbb8c32e31456ed12f339dde741e36b_JaffaCakes118
-
Size
333KB
-
MD5
abbb8c32e31456ed12f339dde741e36b
-
SHA1
a04ac9d71af03d15fa5e54d62a8da6c865409f71
-
SHA256
5e49fcad6d7a95781d25874242be2e8f9dd54a3eff84f65fe67dd2da05590587
-
SHA512
cf222a92319144d12bf1bad71cc8431feb8606fdf5cce66320945bab81d3e082cf6c38651c41928b80db7b0cad677ae700250aabdceefe3a7540293dc3ef39b4
-
SSDEEP
6144:kuqaINe3J9LUtu0H9Xuzim4bGzn/UpbTAQzbuD9IYizW9PQDdIpO/sDrNkPgL+A+:kFr43rS9X/SrclTAao9iS9oDUdcgLfeH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abbb8c32e31456ed12f339dde741e36b_JaffaCakes118
Files
-
abbb8c32e31456ed12f339dde741e36b_JaffaCakes118.dll windows:4 windows x86 arch:x86
36b75356c1df899311983cd1cae8af71
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
EmptyClipboard
DrawTextA
EnableWindow
DrawStateA
DrawCaption
DialogBoxParamA
DestroyCursor
CreateMenu
CreateDialogIndirectParamA
CopyRect
CopyImage
CloseWindow
CharNextA
ChangeMenuA
BeginPaint
EnableScrollBar
ActivateKeyboardLayout
kernel32
lstrcpynA
lstrcmpA
RaiseException
OpenFile
InitializeCriticalSection
GetVersion
GetPrivateProfileStringA
GetModuleHandleA
ExitThread
EnumResourceNamesA
CompareStringA
CloseHandle
lstrlenA
Sections
.text Size: 78KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 247KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ