Static task
static1
Behavioral task
behavioral1
Sample
b3993758943ff654eef1c14aad42126f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b3993758943ff654eef1c14aad42126f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b3993758943ff654eef1c14aad42126f_JaffaCakes118
-
Size
60KB
-
MD5
b3993758943ff654eef1c14aad42126f
-
SHA1
3fda8d901df59d42c3731a30386808a014041468
-
SHA256
255e9ffa0447a466eb7905fe77a5b21b8b90216ca24abdd1e9820e187bde11ad
-
SHA512
36fec6f3a780ceba7419f20db36fddb484e84f555897518e60c5f295a9532e1f180fa279f3b150973983af2feee4baf99de80c4b5bcb6c2a60b03557db60c936
-
SSDEEP
1536:rfeoNbUIdmnHgv42PWSNe25rlc/+vBO+jX9SJv5TTb9jRH:TeerSgv4mNeirGgO+BeTb9jRH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3993758943ff654eef1c14aad42126f_JaffaCakes118
Files
-
b3993758943ff654eef1c14aad42126f_JaffaCakes118.dll windows:4 windows x86 arch:x86
e041e2b961df9a8b600c746069215c2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
RegisterClassW
OffsetRect
MessageBoxW
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW
kernel32
GetTimeZoneInformation
IsValidCodePage
HeapValidate
GetTickCount
GetCurrentProcessId
GetConsoleMode
ExitProcess
UnhandledExceptionFilter
SetHandleCount
advapi32
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
comdlg32
GetOpenFileNameW
GetFileTitleW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ