Static task
static1
Behavioral task
behavioral1
Sample
d0bfa4e24071aba9feb34bce22fb27d0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d0bfa4e24071aba9feb34bce22fb27d0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d0bfa4e24071aba9feb34bce22fb27d0_JaffaCakes118
-
Size
60KB
-
MD5
d0bfa4e24071aba9feb34bce22fb27d0
-
SHA1
02f2ba255d8d91619c84e6efc3c276be4524e485
-
SHA256
bbf1022811feae34a0f5021a0f4ac8185e022d2d5211c4f57a54b5990ca8277f
-
SHA512
73ad28449cfdfc132c1cf41879f6a529e1c8a1484a0581997f27c2cadeecf4afbe82bf0ca01152690a231cecc6bda6c056bd418e8e5e7a16cc59c5aa157a9a37
-
SSDEEP
1536:RTaM6QkziPnGTSB/1lVsbr8zhRfEAOgnGJm6ig55q59:RTjlkroybozignam6x4/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0bfa4e24071aba9feb34bce22fb27d0_JaffaCakes118
Files
-
d0bfa4e24071aba9feb34bce22fb27d0_JaffaCakes118.dll windows:4 windows x86 arch:x86
187af72e4da7c0bf8c36f5d16ab9523a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
dinput
DirectInputCreateEx
DirectInputCreateW
DirectInputCreateA
user32
CloseWindow
SetFocus
SetCursor
CharToOemBuffA
dsound
DirectSoundCaptureCreate
DirectSoundEnumerateW
shell32
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
ShellExecuteExW
ShellExecuteExA
SHGetPathFromIDListA
kernel32
CloseHandle
lstrcpyA
lstrcmpA
lstrcatA
SetUnhandledExceptionFilter
SetLastError
SetCurrentDirectoryA
OpenFileMappingA
LocalAlloc
GetTimeFormatA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetLastError
GetDateFormatA
GetCommandLineA
FlushFileBuffers
ExitProcess
EnumResourceTypesA
EnterCriticalSection
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ