Static task
static1
Behavioral task
behavioral1
Sample
da5606939fe1a927038b87d86220532d_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
da5606939fe1a927038b87d86220532d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
da5606939fe1a927038b87d86220532d_JaffaCakes118
-
Size
58KB
-
MD5
da5606939fe1a927038b87d86220532d
-
SHA1
e6f4b922b9917936b1976081ae0cac8d28d21db3
-
SHA256
cdfb8ab263a82cd20243fad0d9e0ba8ce595c2e539d8898f1865f44df7ad0d57
-
SHA512
c33e8e9ef538f59845d0e473cf5bd5906abe126bbbf4856c1cc932d8ca17db0cc33f766dc8864deeeb8d9bab2f7fc81b751eb2f2879c12c16bb397e1d436f7eb
-
SSDEEP
768:VoR2BV6WvY6QEk0JsohwDYFMkR97bN1drWrgGy4+FRFk+w2de0hBrHXL4x:VA2BrgvEktDUR97trj40RFk+/M0hBTXW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da5606939fe1a927038b87d86220532d_JaffaCakes118
Files
-
da5606939fe1a927038b87d86220532d_JaffaCakes118.dll windows:4 windows x86 arch:x86
f8bf217a24a3d22197436e8182a434ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DestroyWindow
DestroyIcon
DestroyCaret
CreatePopupMenu
CreateMenu
CreateIconFromResourceEx
CreateDialogIndirectParamA
CreateDesktopW
CreateDesktopA
CreateCursor
CreateAcceleratorTableA
CopyRect
CharUpperA
CharToOemA
ChangeMenuA
kernel32
ExitProcess
lstrlenA
lstrcmpiA
lstrcmpA
lstrcatA
VirtualFree
TlsSetValue
TlsGetValue
TlsAlloc
SleepEx
SetLastError
ReadFile
RaiseException
OpenFileMappingA
OpenFile
MapViewOfFile
CloseHandle
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
GetModuleHandleA
GetStartupInfoA
GetSystemTime
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE