_mjZE9_mV
Static task
static1
Behavioral task
behavioral1
Sample
bfd5659002aceffae20fe820f8b84cd2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bfd5659002aceffae20fe820f8b84cd2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bfd5659002aceffae20fe820f8b84cd2_JaffaCakes118
-
Size
532KB
-
MD5
bfd5659002aceffae20fe820f8b84cd2
-
SHA1
99b54e814a337ad02625ebdb24e2988ffe60d719
-
SHA256
83b05f35b21bdf9339a1d127e7ccac4126716fed541afba836fc0427d188cba3
-
SHA512
ede910395d52469034b1272f8f366b1919fe87927401df041adba80fa5f9d652277587a0ef11aa2bb5160243cf17b30a4f8faef014b5c55a011f39b62f33dc60
-
SSDEEP
3072:CnaWq95qgyk1HUxuu8OsFLiXMnuZNThzgfjWmbbKCQwE9b7j1i5CvNfRqBdup/gf:Jxj0xhPsFLiXXZVAjQBPY8yspfT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfd5659002aceffae20fe820f8b84cd2_JaffaCakes118
Files
-
bfd5659002aceffae20fe820f8b84cd2_JaffaCakes118.dll windows:4 windows x86 arch:x86
34e0a5d358c1ada2d447825ccf666670
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetMenu
GetMenuItemCount
CreatePopupMenu
CharUpperA
LoadBitmapA
GetLastActivePopup
GetMenuItemID
GetMenuItemInfoA
kernel32
GetTempPathA
LoadLibraryA
HeapDestroy
GetStringTypeA
lstrcpynA
GetProcAddress
LoadLibraryExA
FreeLibrary
GetStartupInfoA
ExitProcess
VirtualAlloc
ExitThread
FindResourceA
GetSystemDefaultLangID
GetProcessHeap
CreateThread
lstrcatA
VirtualAllocEx
FindFirstFileA
GetCurrentThreadId
LocalReAlloc
SetLastError
comctl32
ImageList_Remove
ImageList_Add
ImageList_GetBkColor
ImageList_Destroy
gdi32
GetBitmapBits
CreateFontIndirectA
GetDIBColorTable
Exports
Exports
Sections
CODE Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lkdata Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 512B - Virtual size: 166B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ