Static task
static1
Behavioral task
behavioral1
Sample
c10d2a9c7ca308f9b48f7ba00dd7ebf0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c10d2a9c7ca308f9b48f7ba00dd7ebf0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c10d2a9c7ca308f9b48f7ba00dd7ebf0_JaffaCakes118
-
Size
88KB
-
MD5
c10d2a9c7ca308f9b48f7ba00dd7ebf0
-
SHA1
8a4a4361dad61edcb3794ebcf8bc13afeef587ed
-
SHA256
d316399d3d243594270f3cbb8c674bd4db0673dd5263689c24fa472ad7193e46
-
SHA512
3981f553a14dbdae371e8d825917cb1f69b1e6724e9905e32259e416dc63ee8f1894b59315e9f88135a92c0eb275fc558f4274d13db6bf29adafe7cf253460b7
-
SSDEEP
1536:IdWZ1PR6p95VSYaMxsR2hilaxzPqyJR1T6O2PQdeqZ9oiYUqIi+Ot/TzdIP5FzKw:IdWbKVJaMyRwilkzPh56XPQIw5i+YTzc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c10d2a9c7ca308f9b48f7ba00dd7ebf0_JaffaCakes118
Files
-
c10d2a9c7ca308f9b48f7ba00dd7ebf0_JaffaCakes118.dll windows:5 windows x86 arch:x86
2abf9b752cac1374ff108c6838aef338
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
StrFormatKBSizeW
PathAddBackslashW
PathBuildRootW
user32
MessageBoxW
DispatchMessageW
TranslateMessage
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RCODE Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE