lhbo
Static task
static1
Behavioral task
behavioral1
Sample
bb331f6dbf580fd8fb92945920594c71_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb331f6dbf580fd8fb92945920594c71_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bb331f6dbf580fd8fb92945920594c71_JaffaCakes118
-
Size
76KB
-
MD5
bb331f6dbf580fd8fb92945920594c71
-
SHA1
8ddffdfb40957849e8cc96239a04e8287b9b509b
-
SHA256
47686b2fc2c6132118ea315e30c7c4df4a37791727587f4d1fe6bef9df30cede
-
SHA512
e8ef0371e48918e8fbe6fc1243f018eb8c73d0b16a6b7294da4be976c829c15d27b7adb87dafc128f9ac162e480e8871fd58ef04f89dedc1703a656cbc474e16
-
SSDEEP
1536:vuQHHg1jP7krKjtlPz8RJQYk6QWWVa8S2Q9LLz:vOP4rKPz8TZQWrPVLz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb331f6dbf580fd8fb92945920594c71_JaffaCakes118
Files
-
bb331f6dbf580fd8fb92945920594c71_JaffaCakes118.dll windows:4 windows x86 arch:x86
3d319dbe0a03fdc486b7fb168b4103e8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitThread
HeapAlloc
GetProcessHeap
HeapFree
EnumCalendarInfoExA
QueryPerformanceFrequency
Beep
FormatMessageA
MoveFileWithProgressA
SetThreadPriority
HeapCompact
HeapValidate
IsValidLanguageGroup
ReadConsoleInputA
ExitProcess
user32
SetWindowTextW
GetWindowTextW
GetClassNameW
GetDlgCtrlID
CharNextA
DialogBoxParamW
GetWindowTextA
SetWindowPos
EnumChildWindows
SystemParametersInfoW
DestroyWindow
GetSystemMetrics
LoadIconW
GetDlgItemTextW
GetDC
GetClientRect
SendDlgItemMessageW
IsWindowEnabled
EndDialog
InvalidateRect
SetDlgItemTextW
GetWindowLongW
SetWindowLongW
wsprintfW
ShowWindow
IsDlgButtonChecked
GetParent
SendMessageW
MessageBoxW
EnableWindow
GetDlgItem
CheckDlgButton
CreateDialogParamW
GetClassNameA
advapi32
RegCloseKey
Exports
Exports
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ