tfbals
Static task
static1
Behavioral task
behavioral1
Sample
e1d968ef75f6a8d88261ab358ea2faca_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
e1d968ef75f6a8d88261ab358ea2faca_JaffaCakes118
-
Size
21KB
-
MD5
e1d968ef75f6a8d88261ab358ea2faca
-
SHA1
426437b4e8b6a1b83d2f585bb4dadad44e85732e
-
SHA256
bfb1456bd7f39df588135b26ce034737b094e6fac6558de22a27bc86c879cb00
-
SHA512
60f1a08a5240e1f054bbe3405d7a5d3ced5a4ebf9db465b5614809dad277db9032f73adc4045b7d2f4ac58baaac5ce3e78dbd50b89c2e6d5d30b79514d9993a1
-
SSDEEP
384:zYZr8Pzszo0dIyP+1jE+zO5AZ+0n+YRjvPkFrqtrt9cr:8OAQevOUKEr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1d968ef75f6a8d88261ab358ea2faca_JaffaCakes118
Files
-
e1d968ef75f6a8d88261ab358ea2faca_JaffaCakes118.dll windows:4 windows x86 arch:x86
3ffa58f95ddcabf39b537229b6752100
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowWindow
PostMessageW
MessageBoxIndirectW
IsMenu
GetDlgItem
EnableWindow
DefDlgProcA
DdeCreateDataHandle
DdeCmpStringHandles
CreatePopupMenu
CharToOemBuffA
CallWindowProcW
wsprintfA
kernel32
lstrlenA
lstrcmpiA
lstrcatA
AddAtomA
Beep
CloseHandle
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
ExitThread
FillConsoleOutputCharacterA
FlushViewOfFile
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeaps
GetSystemTime
GetTickCount
HeapAlloc
HeapFree
InitAtomTable
LoadLibraryA
LoadLibraryExA
OpenMutexA
RtlMoveMemory
SleepEx
SystemTimeToTzSpecificLocalTime
WaitForDebugEvent
WideCharToMultiByte
WriteConsoleA
WriteFile
_llseek
_lread
_lwrite
gdi32
SelectObject
GetGlyphIndicesA
GetDeviceCaps
GetDIBColorTable
DeleteObject
DeleteDC
CreateDIBSection
CreateCompatibleDC
BitBlt
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ