Static task
static1
Behavioral task
behavioral1
Sample
b634657b9b6b72b318c6c3890b748ca0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b634657b9b6b72b318c6c3890b748ca0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b634657b9b6b72b318c6c3890b748ca0_JaffaCakes118
-
Size
110KB
-
MD5
b634657b9b6b72b318c6c3890b748ca0
-
SHA1
474dbd984329464a745eeab40e62855c6816569b
-
SHA256
783e5b6f7a1ade02a483f26d3b7e33aefcc7586aae9e64e03ad98d11b092dbc4
-
SHA512
a2d9440832c3fbbe2166712cc388a144cd9b0d7e6c8bdd44e4393b7b79ca584e1642936da10604922cdf543dd5bbd3c0bb34d03691c9cadeca38e323b7729097
-
SSDEEP
1536:zzKTGq50yrb9pn5pTYA4NYMf22j9bg8HdClV2fqUGjj+AYjWwlbx00AFg55q59:6TGq5D9p5pONYkFO890XUfDjrlbX4/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b634657b9b6b72b318c6c3890b748ca0_JaffaCakes118
Files
-
b634657b9b6b72b318c6c3890b748ca0_JaffaCakes118.dll windows:4 windows x86 arch:x86
de148f3a6addb89c494d4df323ee106c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dinput
DirectInputCreateW
DirectInputCreateA
dsound
DirectSoundCaptureCreate
DirectSoundCreate
DirectSoundFullDuplexCreate
DirectSoundCreate8
shell32
SHBindToParent
SHGetPathFromIDListA
ShellExecuteExW
SHFileOperationA
user32
CreateIconFromResourceEx
CreateDesktopW
CreateCursor
CreateAcceleratorTableA
CopyImage
DefDlgProcA
CharToOemBuffA
CharPrevA
CharNextA
BeginPaint
wsprintfA
DeleteMenu
EnableMenuItem
EndPaint
ShowScrollBar
ShowCaret
MessageBoxA
GetFocus
CharUpperA
LoadAcceleratorsW
LoadCursorA
kernel32
CompareStringA
EnumResourceLanguagesW
lstrcpyA
lstrcmpA
WriteFile
TlsFree
SleepEx
Sleep
SetUnhandledExceptionFilter
RtlUnwind
ReadFile
RaiseException
InitializeCriticalSection
GetVersionExA
GetTimeFormatA
GetSystemTimeAsFileTime
GetStartupInfoA
GetPrivateProfileStringA
GetModuleHandleA
GetLocalTime
GetDateFormatA
GetCommandLineA
FindResourceA
ExitProcess
CloseHandle
Sections
.text Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ