Static task
static1
Behavioral task
behavioral1
Sample
d1b4b0c311a3fae3a367c8d6f38c82ba_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d1b4b0c311a3fae3a367c8d6f38c82ba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d1b4b0c311a3fae3a367c8d6f38c82ba_JaffaCakes118
-
Size
92KB
-
MD5
d1b4b0c311a3fae3a367c8d6f38c82ba
-
SHA1
86d94be275c2db14d3116a4204b1d8e0b70cc3fb
-
SHA256
b33310842577dfc84bf77a5dda155e9505e5b40359f77c92457a03cfeb740c44
-
SHA512
d62d070ab4d320b61ef389352a7182726008800371661660b754bc31a12eda241482b189a8ae8def7204b0da32acc3c68bdbd4d65135d1c7353663a250464bc5
-
SSDEEP
1536:BWdgp/LGs+qgvLYSIeVBjeA2DxpcLtD6N66/Ras3XkGgx:BWdajGRAwaxDxS5D6wMRBkZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1b4b0c311a3fae3a367c8d6f38c82ba_JaffaCakes118
Files
-
d1b4b0c311a3fae3a367c8d6f38c82ba_JaffaCakes118.dll windows:4 windows x86 arch:x86
614b8902b3e3e4c37a2ed1f8cc385e38
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateNamedPipeW
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
ResetEvent
RtlUnwind
SizeofResource
Sleep
WinExec
lstrcpynW
user32
TrackPopupMenu
UpdateWindow
LoadMenuA
GetCapture
FrameRect
DrawIconEx
ClientToScreen
TrackPopupMenuEx
comctl32
ImageList_AddMasked
InitializeFlatSB
ImageList_Write
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_SetScrollRange
GetMUILanguage
ImageList_SetFlags
ImageList_DragShowNolock
ole32
CoGetMalloc
CoTaskMemAlloc
CoTaskMemFree
CreateAntiMoniker
StringFromGUID2
CoFileTimeNow
CoCreateInstance
CoCreateGuid
CLSIDFromString
CoBuildVersion
dbghelp
SymLoadModule64
SymGetOptions
SymGetLinePrev64
SymGetModuleBase64
ImageNtHeader
ImageDirectoryEntryToData
FindExecutableImage
oleaut32
SysReAllocString
SafeArrayAllocDescriptor
SafeArrayAccessData
RevokeActiveObject
OleLoadPicturePath
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ