_h1WD29n
Static task
static1
Behavioral task
behavioral1
Sample
c93881b95b223bdd70585f3f5061052e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c93881b95b223bdd70585f3f5061052e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c93881b95b223bdd70585f3f5061052e_JaffaCakes118
-
Size
202KB
-
MD5
c93881b95b223bdd70585f3f5061052e
-
SHA1
7854ea8828cfed5bb316e28688e0cff67a3dd84f
-
SHA256
dcbd2089502a3526c1cd55233f0900bbc82fa954ef503c216b2655b94ceb3c87
-
SHA512
927c2e6ddf966134274c9fe956fca15e628427b86c7cd85a94db2133f00b9240983b3d9d8fb5e648aaf58e60db2a3301e487e3fd987a1f8c23af8a785e81afcc
-
SSDEEP
6144:w+Tp0QyzNZALThHudgOSNASZci7rjwf89je3X0:Pt0QjfhHudg/NASZP3wE9yH0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c93881b95b223bdd70585f3f5061052e_JaffaCakes118
Files
-
c93881b95b223bdd70585f3f5061052e_JaffaCakes118.dll windows:4 windows x86 arch:x86
06a89fcdc7ce16e1f41f04d67c2c0e18
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetMenuItemCount
OemToCharA
GetFocus
MessageBoxA
IsWindow
OpenClipboard
OffsetRect
GetMenu
kernel32
DeleteCriticalSection
IsBadHugeReadPtr
GetCPInfo
HeapAlloc
SetErrorMode
LoadLibraryA
GetFullPathNameA
GlobalDeleteAtom
ResetEvent
CreateThread
MoveFileExA
GlobalFindAtomA
HeapFree
ReadFile
ExitProcess
GetVersionExA
FindFirstFileA
GetSystemDefaultLangID
VirtualAllocEx
GetCurrentThreadId
RaiseException
VirtualAlloc
EnumCalendarInfoA
gdi32
CreateDIBitmap
shell32
SHGetDesktopFolder
Shell_NotifyIconA
DragQueryFileA
SHFileOperationA
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ