Static task
static1
Behavioral task
behavioral1
Sample
ba3bc59fd5d253ea1865e158acb7fc9a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba3bc59fd5d253ea1865e158acb7fc9a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ba3bc59fd5d253ea1865e158acb7fc9a_JaffaCakes118
-
Size
76KB
-
MD5
ba3bc59fd5d253ea1865e158acb7fc9a
-
SHA1
0268791232531961e8242dfd02451537ffe18cc2
-
SHA256
aa4b941953d48bb03c445d89b61a0fd2b2b9428e9086669aeb90094717fa4bea
-
SHA512
d519a5e0c3cebe61bcae058399b13c7f63ffbc10312f9313f2eb01d3ac28dfaa8e1b31e0bfd480926513f1eb826ff3c762ea7b873a5a954fbafd16f411640526
-
SSDEEP
1536:hKEpTYX/QA5sBfg7o+I/OKU+z5WnN0NltIhCsbMYO60+CSUjMQu4Z38j5:4X/QIT7DKf5TNlWe+Scw8j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba3bc59fd5d253ea1865e158acb7fc9a_JaffaCakes118
Files
-
ba3bc59fd5d253ea1865e158acb7fc9a_JaffaCakes118.dll windows:5 windows x86 arch:x86
219f30b3f4c40c834ca83656a6a25e89
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
SetRect
gdi32
DeleteDC
shell32
ShellExecuteA
psapi
GetModuleInformation
msvcr100
free
advapi32
RegCloseKey
Sections
.MPRESS1 Size: 71KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE