Static task
static1
Behavioral task
behavioral1
Sample
b98fe189f1b86cbf279ba423ec954c26_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b98fe189f1b86cbf279ba423ec954c26_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b98fe189f1b86cbf279ba423ec954c26_JaffaCakes118
-
Size
57KB
-
MD5
b98fe189f1b86cbf279ba423ec954c26
-
SHA1
f944902d8690fb115ce00d80d7592448bcb65ae7
-
SHA256
a9aad0d3a79cb4363a25c6df4948da8ad16ea794607a432d296656bfc097babb
-
SHA512
9dae12c1f308e894b0c58b574916ec85af845283822e5516c284dabb362edc76f6160fda8fb0c843cb3fa076f8798fd6b3d902a5554c105bcfcf2646d2b9c60c
-
SSDEEP
1536:+wSxPEresK56c0tkrpVUEkJ+H0jYJqXoxHOTMddg:2PEa56tKr0EUG0jxX6OQ7g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b98fe189f1b86cbf279ba423ec954c26_JaffaCakes118
Files
-
b98fe189f1b86cbf279ba423ec954c26_JaffaCakes118.dll windows:4 windows x86 arch:x86
ce8a8552016dfed27baac7c3c6d69c6d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
GetLastError
FreeLibrary
LocalFree
GetModuleHandleW
GetProcAddress
LoadLibraryW
lstrcmpiW
lstrcpynW
GetCommandLineA
MultiByteToWideChar
lstrcatW
FormatMessageW
lstrcpyW
GetProfileStringW
lstrcmpA
lstrcpynA
lstrlenW
GetWindowsDirectoryW
VirtualProtect
WideCharToMultiByte
VirtualAlloc
user32
GetDlgItem
MessageBoxW
GetWindowTextW
GetWindowTextLengthW
LoadStringW
GetFocus
SetFocus
EnableWindow
SendMessageW
SetDlgItemTextW
LoadIconW
SendDlgItemMessageW
EnumDisplayDevicesW
DialogBoxParamW
EndDialog
GetWindowLongW
SetWindowLongW
MoveWindow
ScreenToClient
GetWindowRect
wsprintfW
gdi32
GetDeviceCaps
DeleteDC
msvcr71
_adjust_fdiv
_initterm
malloc
free
_onexit
_wcsdup
_wsplitpath
_wcsicmp
memmove
_except_handler3
__dllonexit
__CppXcptFilter
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ