Static task
static1
Behavioral task
behavioral1
Sample
da5a6b1cb845278aea577ffea564b63a_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da5a6b1cb845278aea577ffea564b63a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
da5a6b1cb845278aea577ffea564b63a_JaffaCakes118
-
Size
92KB
-
MD5
da5a6b1cb845278aea577ffea564b63a
-
SHA1
110a0f4c126bf649b39d1468084f142f6d0ac586
-
SHA256
d6db5054b13a7fc6bc64b014868f79166f42216f232e37c424ca351c4908f9d5
-
SHA512
9f017ee4a903e90a81a66335c69f665ad97bffca7fd905a3bb24cf75ea623d10bfa57f8e59fbdb41e8f54eb9c6890818c53c0ae75c2ae3fa969525060c616695
-
SSDEEP
1536:ANotNvfcv4AmyaTmCJjYil/S0bRK+4O9yg8B96HTZn9EchoH6Kx:r/waq2jfq0KTO9yg8B96HdSYO6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da5a6b1cb845278aea577ffea564b63a_JaffaCakes118
Files
-
da5a6b1cb845278aea577ffea564b63a_JaffaCakes118.dll windows:4 windows x86 arch:x86
8fba4ddcb248a65db63666555a1c9dbb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
comdlg32
ChooseColorA
ChooseColorW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
dwOKSubclass
WantArrows
GetOpenFileNameA
GetOpenFileNameW
LoadAlterBitmap
PrintDlgA
ReplaceTextW
user32
DialogBoxParamA
EnumWindows
GetDesktopWindow
GetUserObjectSecurity
ScreenToClient
SendMessageA
kernel32
HeapCreate
GetDevicePowerState
GetCommandLineA
GetACP
ExpandEnvironmentStringsA
ExitProcess
EnumSystemLocalesW
EnumLanguageGroupLocalesW
CreateWaitableTimerW
CloseHandle
CallNamedPipeW
GetModuleHandleA
SetSystemPowerState
SetComputerNameA
RtlMoveMemory
LCMapStringA
GetStartupInfoA
HeapAlloc
GetVersionExA
GetLogicalDrives
ole32
StringFromGUID2
CoCreateInstance
CLSIDFromString
dbghelp
FindDebugInfoFileEx
ImageNtHeader
ImageRvaToVa
MapDebugInformation
SymEnumSourceFiles
SymFromAddr
SymGetLineFromAddr64
SymGetLinePrev64
SymGetSymFromAddr
SymGetSymPrev
SymGetTypeFromName
SymMatchString
SymSetOptions
UnmapDebugInformation
ImageDirectoryEntryToData
comctl32
CreateStatusWindowA
DestroyPropertySheetPage
DrawInsert
FlatSB_SetScrollInfo
ImageList_DrawEx
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_Merge
ImageList_SetFilter
UninitializeFlatSB
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ