Static task
static1
Behavioral task
behavioral1
Sample
df2a9cc90fa739627040bbac35ea4ca0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df2a9cc90fa739627040bbac35ea4ca0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
df2a9cc90fa739627040bbac35ea4ca0_JaffaCakes118
-
Size
32KB
-
MD5
df2a9cc90fa739627040bbac35ea4ca0
-
SHA1
41f53ed702abac91193f73a98541bac066c5061b
-
SHA256
43f8c6d6208d64a8aba4b8ab7882f604be84fa1133cf70e538669135f263eec5
-
SHA512
c221f83f08890f4253cf86d1c62915cfb184e43ff85ca6ee2e706e61c5f6ba96809b5aeb5318d3298250706293a7779bb9c027309f063043b4d4b11c39af0dcb
-
SSDEEP
384:HXaswddy6KYCkyk6u81eXuz2JJb7W28yoxa7hW4M1PzeBNs3uPGB9IaG13:3yy6N/631eez2JpVoY4KrH49/G13
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df2a9cc90fa739627040bbac35ea4ca0_JaffaCakes118
Files
-
df2a9cc90fa739627040bbac35ea4ca0_JaffaCakes118.dll windows:4 windows x86 arch:x86
21e5ea15099cb6aaf00b15f46f0f130e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
CopyIcon
DestroyIcon
GetDesktopWindow
GetWindowTextLengthA
InvalidateRect
IsWindow
KillTimer
LoadCursorA
LoadIconA
LoadIconA
LoadStringA
MessageBoxA
PeekMessageA
PostMessageA
PostQuitMessage
RegisterClassA
ReleaseCapture
ReleaseDC
SendMessageA
SetCursor
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetPropA
SetScrollPos
SetScrollRange
SetSysColors
SetTimer
SetWindowLongA
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage
UpdateWindow
ValidateRect
WaitMessage
wvsprintfA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE