Static task
static1
Behavioral task
behavioral1
Sample
b4ab2d897e33a3dee588c52931317c64_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4ab2d897e33a3dee588c52931317c64_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b4ab2d897e33a3dee588c52931317c64_JaffaCakes118
-
Size
84KB
-
MD5
b4ab2d897e33a3dee588c52931317c64
-
SHA1
f81ec97d11a32467359e34f4b72d6e99a4c89588
-
SHA256
57be09f6227f7392ad7c5f45604d9ec20577a6e1c6e8aec24832a2a9fe80b208
-
SHA512
b60fe467bfd0bd50aabf54891e98d40adbf846bb905540e72c16c80c95505d7e1711e16593474c03667ed9756f186c9dfd568eb5d7ad3a894e2031b3a17d013d
-
SSDEEP
1536:qWz3YtqXLd44QIfGiUiAwLrM41WkhcR7N/xZN9eey+8vda0J2s5IlFelf+:qw3YtqBiIfKiAwfM9RRJZeNbJ2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4ab2d897e33a3dee588c52931317c64_JaffaCakes118
Files
-
b4ab2d897e33a3dee588c52931317c64_JaffaCakes118.dll windows:4 windows x86 arch:x86
31a2173f1e3aaca292e5d362e5585cd1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
SetFocus
MessageBoxIndirectA
MessageBeep
LoadMenuA
LoadIconA
EndDeferWindowPos
EnableScrollBar
DrawIcon
DialogBoxParamA
CharUpperA
CharToOemBuffA
CharLowerA
wsprintfA
kernel32
GetModuleHandleA
GetSystemTime
GetFileSize
EnumResourceLanguagesA
CompareStringA
RtlUnwind
TlsAlloc
lstrcatA
lstrcmpiA
LoadLibraryA
oleaut32
OleLoadPicturePath
RegisterTypeLib
SafeArrayAllocData
SafeArrayDestroy
SysFreeString
SysReAllocString
VarBstrCat
OleIconToCursor
Sections
.text Size: 17KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ