StartDialog
Static task
static1
Behavioral task
behavioral1
Sample
dea419db4a33d5998b80ccb2b7c6566f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dea419db4a33d5998b80ccb2b7c6566f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dea419db4a33d5998b80ccb2b7c6566f_JaffaCakes118
-
Size
10KB
-
MD5
dea419db4a33d5998b80ccb2b7c6566f
-
SHA1
f47c4aa4132012b499cf7cb61597c5849cfe857f
-
SHA256
bb74051976e4f0010163a080ab4174b88c56185d2b1b34eb81f1b2918c292007
-
SHA512
0da0c222bf8481f3a42df10859fa2a868186ed3c91b4472d97a2c151e23ae561b100653c8635c74c842600f8c14bbacdc79a71b3690550742f08d8884b0ec2d7
-
SSDEEP
96:FLjAmJtiLxmpFlP8sdcMoDU+AUF9LqdvQtsh7Y5cDG2zQAaOgMnNXejTlH:50mpFlP8sdgDqY5gf8NOI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dea419db4a33d5998b80ccb2b7c6566f_JaffaCakes118
Files
-
dea419db4a33d5998b80ccb2b7c6566f_JaffaCakes118.dll windows:4 windows x86 arch:x86
e8d65509d50c76f1bb3b2a0377a3ccc3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
BitBlt
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
gdiplus
GdipGraphicsClear
GdipCreatePath
GdipAddPathStringI
GdipDrawPath
GdipFillEllipseI
GdipDeletePath
GdipFillRectangleI
GdipDeleteBrush
GdipDeleteFontFamily
GdipDeleteStringFormat
GdipDeletePen
GdipDeleteGraphics
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipSetPageUnit
GdipCreateLineBrush
GdipCreateFontFamilyFromName
GdipCreateStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreatePen1
GdipCreateSolidFill
user32
GetClientRect
InvalidateRect
BeginPaint
EndPaint
SetTimer
PostMessageA
KillTimer
EndDialog
GetDC
ReleaseDC
DialogBoxParamA
kernel32
RtlZeroMemory
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ