Static task
static1
Behavioral task
behavioral1
Sample
dfa96a6b4592462ccc2ef004019635b6_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dfa96a6b4592462ccc2ef004019635b6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dfa96a6b4592462ccc2ef004019635b6_JaffaCakes118
-
Size
91KB
-
MD5
dfa96a6b4592462ccc2ef004019635b6
-
SHA1
535729e00efae69906621b2b1a705337531f0528
-
SHA256
aef284dbc583ffffdb3b6687dd27de637d076f9c4fb966052106d033339f5422
-
SHA512
d39ea2ef20daedfe295c7075f771cf1cb77033d04f056d168b2a491f2c09b46e1ef404b8aa263f551ba43ea60b8d55fb980f0b4c1cf9ef09dbc5f50cc027541b
-
SSDEEP
1536:ODvx36dg7plt1v407VZ3gIidQdwpDawQtp1frJl+Y1eAXzuQzMwIkdRmQk:ODvF97R1w07VFFidQdwpuwKp5rJl4AXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfa96a6b4592462ccc2ef004019635b6_JaffaCakes118
Files
-
dfa96a6b4592462ccc2ef004019635b6_JaffaCakes118.dll windows:4 windows x86 arch:x86
a20fec2fcd3518dd6dcfee6633d299b8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawMenuBar
DrawIcon
DrawCaption
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyCaret
DefDlgProcA
CreatePopupMenu
CreateMenu
CreateMDIWindowA
CreateIconFromResource
CreateIcon
CreateDesktopW
CopyImage
CharUpperBuffA
CharNextA
ActivateKeyboardLayout
kernel32
EnterCriticalSection
lstrlenA
lstrcmpiA
lstrcatA
VirtualAlloc
TlsGetValue
TlsAlloc
ReadFile
LocalAlloc
GetVersion
GetTimeFormatA
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetCommandLineA
FlushFileBuffers
FindResourceA
ExitThread
Sections
.text Size: 19KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ