Static task
static1
Behavioral task
behavioral1
Sample
b95b261fc65eeaa0ff9037319f850442_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b95b261fc65eeaa0ff9037319f850442_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b95b261fc65eeaa0ff9037319f850442_JaffaCakes118
-
Size
119KB
-
MD5
b95b261fc65eeaa0ff9037319f850442
-
SHA1
169d501581d1db0198f0711fc480c62dfee983ce
-
SHA256
5b1699d9ee4906c3e5bf0c0287d48137046aa3beccfba828fd3cefb5327c73d7
-
SHA512
920256249a7db1437ee8952496f54168af5e385756803e4a3dd1e4d3ad14301b7bcf3c583b2bc44d24bede01ba4aee120d812d150597df1e308dd85ec091e4e3
-
SSDEEP
1536:Q673UFNu7ZuYifk5whIg5LhUGqlXAwxRh1IB8k2nW5ZI2V:B74Nu7IYifAg5NUJhA8//k2ns+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b95b261fc65eeaa0ff9037319f850442_JaffaCakes118
Files
-
b95b261fc65eeaa0ff9037319f850442_JaffaCakes118.dll windows:4 windows x86 arch:x86
079ab1403bedcca7440febcd858930a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetCursor
EndDialog
CopyRect
InsertMenuA
GetWindowTextA
DrawIcon
IsWindow
GetWindowTextLengthA
LoadMenuA
GetFocus
DialogBoxParamA
DrawTextW
LoadCursorA
DrawIconEx
DialogBoxParamW
kernel32
DeleteFileA
GetLastError
FindFirstFileA
GetCPInfo
ReadConsoleA
CreateProcessA
ExitThread
GetCommandLineA
SetLastError
GetFileTime
FindAtomA
OpenFileMappingA
CreateThread
GlobalFree
DeleteFileW
WriteFile
GetComputerNameA
OpenFile
DeleteAtom
GetFileSize
ReadFile
GetStdHandle
Sleep
comctl32
ImageList_LoadImageA
InitCommonControls
CreateToolbar
ImageList_EndDrag
DllGetVersion
DrawStatusTextW
ImageList_Add
DrawStatusText
ImageList_DragEnter
MenuHelp
CreateUpDownControl
ImageList_AddIcon
CreateStatusWindowW
ImageList_Copy
ImageList_DrawEx
ImageList_Create
ImageList_LoadImageW
CreateToolbarEx
ImageList_GetIconSize
CreateStatusWindow
CreateMappedBitmap
ImageList_GetIcon
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 69KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 436B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ