Static task
static1
Behavioral task
behavioral1
Sample
ba819cbf240bbeb564b0a4c4b7570b75_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba819cbf240bbeb564b0a4c4b7570b75_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ba819cbf240bbeb564b0a4c4b7570b75_JaffaCakes118
-
Size
91KB
-
MD5
ba819cbf240bbeb564b0a4c4b7570b75
-
SHA1
e3126fd2b11cb2bf409d38d6a6bf5315e5ad8315
-
SHA256
8eab4dfa29364a89a4543ae380cd9e6cb678facd296ff609d278ee4f847da008
-
SHA512
5a74df2265e5bbd7d73db6e2782b879b5c8ae77a5cf4553dacc4ab1a22c1b79757ef9b7b2f82368b9fe5c709a13077074f7dafbf48afaa3d0a629678a659afcb
-
SSDEEP
1536:DY5ilA/u218DoVuvGbKuJ9zIsKwOiaX5IuXRzA/lSLTJ/cXYZQO6:D4ilA/uD0VuruJ98NiaX5IO0/lSp/JZa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba819cbf240bbeb564b0a4c4b7570b75_JaffaCakes118
Files
-
ba819cbf240bbeb564b0a4c4b7570b75_JaffaCakes118.dll windows:4 windows x86 arch:x86
da6001ba307045138be5cda0172c634f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
LoadCursorA
MessageBoxIndirectA
LoadBitmapA
OemToCharBuffA
ShowCursor
LoadAcceleratorsW
LoadAcceleratorsA
GetDC
EndMenu
EnableWindow
DrawTextA
DrawMenuBar
DestroyMenu
DestroyCursor
DestroyCaret
CreateIconFromResourceEx
CreateIconFromResource
CreateIcon
CreateAcceleratorTableA
CharToOemBuffA
CharToOemA
CharPrevA
CharNextA
OemToCharA
ActivateKeyboardLayout
kernel32
lstrcatA
EnumResourceLanguagesW
GetFileSize
GetLastError
GetPrivateProfileStringA
GetVersion
lstrcpynA
lstrcmpA
EnterCriticalSection
UnmapViewOfFile
TlsSetValue
SetCurrentDirectoryA
oleaut32
RevokeActiveObject
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroy
OleIconToCursor
SysStringLen
Sections
.text Size: 19KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ