Static task
static1
Behavioral task
behavioral1
Sample
de37029a259348ef5cc014eee95ba626_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de37029a259348ef5cc014eee95ba626_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
de37029a259348ef5cc014eee95ba626_JaffaCakes118
-
Size
310KB
-
MD5
de37029a259348ef5cc014eee95ba626
-
SHA1
e987beb108dc2d80650bb7736d6c70c35c171a35
-
SHA256
ebec7b23051eaf6200d9b40f27098c94c8981445d3f97cc6b6221d2426a1405a
-
SHA512
6df0282d8b3f848f4a3275b1c32e557f41035bf91771bb7b46f1d92b25239d90cecb32e2e930646bc16ddfe6ea1a9e33f769ecc1a22663a3a56a8cc310538729
-
SSDEEP
6144:doa0YYy6SEwCcRp+F+PKSLaEYoJIKJK45BkEVqup9o/6KyVGyZZUQuBamGHQbhzS:/05RSEdcRpTCMtYou6B24a/6KYGyUwwQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de37029a259348ef5cc014eee95ba626_JaffaCakes118
Files
-
de37029a259348ef5cc014eee95ba626_JaffaCakes118.dll windows:4 windows x86 arch:x86
7475697cf1dea9b402f23a6bfa833be4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
VirtualFree
VirtualAlloc
LoadLibraryA
user32
GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA
Sections
.text Size: 237KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dfd Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ