kvzlziwjg
Static task
static1
Behavioral task
behavioral1
Sample
b25bad1f2776f56c81213c2d5e3ef665_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b25bad1f2776f56c81213c2d5e3ef665_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b25bad1f2776f56c81213c2d5e3ef665_JaffaCakes118
-
Size
124KB
-
MD5
b25bad1f2776f56c81213c2d5e3ef665
-
SHA1
f483618f0a1a0386ef195e669998ffc2be2a3f8d
-
SHA256
255202d4b7d796b7b18a84bb42b39092d620930adf9fc4bb90de2c958220a059
-
SHA512
3a016d37a1801729df65c1fc0517a7df4e5e78e0f095266911800e81de4b778ca4f0b46b0ebd78b77b5bc11273b1cff32525daa0d177b1b443628918919ae655
-
SSDEEP
1536:+smlY9scJw+IKbTlqNEFFK3L9vl0jhQK3UwThzzBqemS:+sKcW+IKHlqmFoL9vl+OKEszzBqe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b25bad1f2776f56c81213c2d5e3ef665_JaffaCakes118
Files
-
b25bad1f2776f56c81213c2d5e3ef665_JaffaCakes118.dll windows:4 windows x86 arch:x86
f549ea7bec248c8e65476b27313028d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
MoveFileWithProgressA
FillConsoleOutputCharacterA
ReadConsoleInputA
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
CreateFileA
ExitProcess
user32
SetWindowPos
SetActiveWindow
SetFocus
LoadIconA
LoadCursorA
ShowWindow
CreateWindowExW
DialogBoxParamA
CreateWindowExA
GetMessageW
TranslateMessage
DispatchMessageW
GetMessageA
DispatchMessageA
MessageBoxA
CharUpperA
CharNextA
DefWindowProcW
DefWindowProcA
PostQuitMessage
IsZoomed
FindWindowA
GetWindowLongA
SetWindowLongA
IsDlgButtonChecked
EndDialog
RegisterClassA
LoadStringA
RegisterClassW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueA
comdlg32
GetOpenFileNameA
gdi32
GetStockObject
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ