Static task
static1
Behavioral task
behavioral1
Sample
ce984f570a4c4b7e5ffc1a94bb73db99_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce984f570a4c4b7e5ffc1a94bb73db99_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ce984f570a4c4b7e5ffc1a94bb73db99_JaffaCakes118
-
Size
112KB
-
MD5
ce984f570a4c4b7e5ffc1a94bb73db99
-
SHA1
2ef5c224824e2b62e2f6c61b435191f854c4862e
-
SHA256
18f09d2e1b8d0642a0d053fdf30c8436655554b1a917c6603d29be911c9f1122
-
SHA512
ba5f79584220627dd3c8f47f512073d999d0096c5742eb65bf28293ed91288381a00d3629e2a66238972070e40b48c981a8780bc399003552c86027ef55db091
-
SSDEEP
1536:G+TIjZSRnD7k6LL/rYjtmfi8HnNslfoOBRv8rffCmO6EHSLp:G+skDg4rYGJnNslXRErfRnSSF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce984f570a4c4b7e5ffc1a94bb73db99_JaffaCakes118
Files
-
ce984f570a4c4b7e5ffc1a94bb73db99_JaffaCakes118.dll windows:4 windows x86 arch:x86
2fff3d8fa0227a44a3e171bb2b562ada
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CopyIcon
CloseWindow
CreateIcon
IsMenu
LoadCursorA
GetCursor
GetFocus
DrawIcon
DrawIconEx
DialogBoxParamW
CopyImage
DrawTextW
CopyRect
DrawTextA
GetWindowTextLengthA
LoadMenuA
GetDlgItem
InsertMenuA
GetMenu
GetWindowTextA
IsWindow
kernel32
DeleteFileA
CreateProcessA
GetFileTime
GetComputerNameA
Sleep
CreateThread
GlobalFree
GetStdHandle
OpenFile
GetLastError
OpenFileMappingA
GetCommandLineA
SetLastError
WriteFile
DeleteAtom
DeleteFileW
GetCPInfo
ReadConsoleA
FindAtomA
ExitThread
FindFirstFileA
ReadFile
GetConsoleMode
GetFileSize
comctl32
ImageList_Create
CreateStatusWindow
CreateUpDownControl
ImageList_LoadImageW
DrawStatusText
MenuHelp
ImageList_Draw
CreateMappedBitmap
InitCommonControls
DrawStatusTextW
CreateToolbarEx
ImageList_DragEnter
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: - Virtual size: 67KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 183B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 877B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ