Static task
static1
Behavioral task
behavioral1
Sample
c20d2a8804c7c1d95801c5cb67652505_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c20d2a8804c7c1d95801c5cb67652505_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c20d2a8804c7c1d95801c5cb67652505_JaffaCakes118
-
Size
85KB
-
MD5
c20d2a8804c7c1d95801c5cb67652505
-
SHA1
7265aedef79cf0fccb6c62490aeb583f6289ecac
-
SHA256
8baebbb6de49cc04bf6ec6427040c200006406dddd8ada54f30fd4940e70ed48
-
SHA512
1bdab4b420469b92b11109b36f2b7c7e4d2a6e0df35193e415f9e664ceaced519d989e6f1d507de597d297393d5d8a4245471eaee1960ccfbb25445bd2db5082
-
SSDEEP
1536:yPUbFmr1nji3N5jGEzgPVYmFN7Y1tD2wtFpHG/e+ri4Hzpg2p7DFg55q59:yPUijQUVLF6/t4T22p64/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c20d2a8804c7c1d95801c5cb67652505_JaffaCakes118
Files
-
c20d2a8804c7c1d95801c5cb67652505_JaffaCakes118.dll windows:4 windows x86 arch:x86
cc62e6136a8c7cd91bbc0b758a0f3536
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dinput
DirectInputCreateEx
DirectInputCreateW
DirectInputCreateA
shell32
SHGetPathFromIDListA
ShellExecuteExW
SHGetDesktopFolder
user32
GetMessageA
GetMenu
GetDlgItem
GetCursor
FillRect
DrawTextA
DestroyWindow
DestroyCursor
IsCharLowerA
CreatePopupMenu
CreateDialogParamA
CreateDesktopA
CreateCursor
CharUpperBuffA
CharUpperA
CharToOemBuffA
CharToOemA
CharPrevA
CharLowerA
ChangeMenuA
BeginPaint
LoadImageA
OemToCharBuffA
ShowCaret
DeleteMenu
dsound
DirectSoundCaptureEnumerateA
DirectSoundCreate
DirectSoundEnumerateW
DirectSoundCaptureCreate
kernel32
CompareStringA
EnumResourceLanguagesA
EnumResourceLanguagesW
lstrlenA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
VirtualAlloc
TlsFree
TlsAlloc
SleepEx
SetLastError
RtlUnwind
OpenFile
LoadResource
LoadLibraryA
GetVersion
GetSystemTime
GetStartupInfoA
GetLocalTime
GetCommandLineA
FreeResource
FlushFileBuffers
ExitProcess
EnumResourceTypesA
EnumResourceNamesA
CloseHandle
Sections
.text Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ