Static task
static1
Behavioral task
behavioral1
Sample
b1795f7ff0875b15885340245bd40a7e_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b1795f7ff0875b15885340245bd40a7e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b1795f7ff0875b15885340245bd40a7e_JaffaCakes118
-
Size
105KB
-
MD5
b1795f7ff0875b15885340245bd40a7e
-
SHA1
b47250c05b8e13bd05a4131ba9062668db449cf8
-
SHA256
de78eb1f0664d5c50ed1311cb0fd1fe48e25cd6f8ec86e92871e6fcb0dd374d4
-
SHA512
f18c48005b1d18f9e1749302369e9c33f56cf547c4a2ccd8609d217c2c22661f0dbdecd80570b46f0b3c1306dbe9ea3cc9a2f54c7028c7c23bd6e91765461cda
-
SSDEEP
1536:KVOf2oVNjmuWqOiOKg7W+mYxhciRYTzQKlWfg2BF1vgp9C8BAfi8VSHO+xOlC1Ej:b+oeQg7WBAWiRYTPoOpQ8BAHt+uu14D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1795f7ff0875b15885340245bd40a7e_JaffaCakes118
Files
-
b1795f7ff0875b15885340245bd40a7e_JaffaCakes118.dll windows:4 windows x86 arch:x86
6c30ac7ea0da57492ac14e7216c5d723
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
LoadAcceleratorsA
LoadBitmapA
LoadImageA
GetWindowTextA
OemToCharW
ShowCursor
ShowScrollBar
GetDC
EqualRect
EndDeferWindowPos
EnableWindow
EnableScrollBar
DestroyWindow
DestroyCursor
CreateMDIWindowA
CreateDialogParamA
CreateDialogIndirectParamA
CreateDesktopW
CharUpperA
CharToOemBuffA
CharPrevA
CharLowerA
LoadMenuA
BeginPaint
kernel32
EnumResourceNamesA
LoadLibraryA
UnmapViewOfFile
lstrcpyA
GetModuleHandleA
oleaut32
RevokeActiveObject
SafeArrayAllocData
OleLoadPicturePath
OleLoadPicture
SafeArrayAllocDescriptor
SafeArrayCreate
SysFreeString
VarBstrCat
OleTranslateColor
VarBstrCmp
Sections
.text Size: 28KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ