Static task
static1
Behavioral task
behavioral1
Sample
e21e16a853cf4f336f4950fbe89374b0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e21e16a853cf4f336f4950fbe89374b0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e21e16a853cf4f336f4950fbe89374b0_JaffaCakes118
-
Size
51KB
-
MD5
e21e16a853cf4f336f4950fbe89374b0
-
SHA1
5ef4c2d7acab9b11c824cef8ae96ac725a3e87c2
-
SHA256
29feac2618f2746187a4d31bea8ab4b8daba716971e198f8c9e28c0d505d6081
-
SHA512
3cd776cf940e2910b3691c86570fbbab011fe95928b7d99ef220a4856bd61befd64007040d184bef4d985dcac4b37c45697f2c3c0e5e00cc65ffab4185496a77
-
SSDEEP
768:8QtXT/LlbizsU9t0S6B8LbRJlk7eeSpeqz4FFxX01Zi:8+RYt0S6B8ZkQeyYFqi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e21e16a853cf4f336f4950fbe89374b0_JaffaCakes118
Files
-
e21e16a853cf4f336f4950fbe89374b0_JaffaCakes118.dll windows:4 windows x86 arch:x86
645e8f6fdbbaa1cd4b7cf1768db65fb0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetProcAddress
RtlUnwind
Sleep
LocalAlloc
GlobalAlloc
lstrcpyA
WritePrivateProfileStringA
LocalFree
GetTickCount
GlobalFree
GetCommandLineA
VirtualProtect
FreeLibrary
user32
LoadIconA
wsprintfA
SendDlgItemMessageA
GetMessageA
DispatchMessageA
ReleaseDC
GetDlgItem
GetForegroundWindow
SetTimer
KillTimer
GetDC
FillRect
GetClientRect
FindWindowA
RegisterWindowMessageA
RegisterClassA
CreateWindowExA
SetForegroundWindow
TranslateMessage
SendMessageA
PostMessageA
PostQuitMessage
GetParent
IsWindow
SetCursor
GetCursorPos
DefWindowProcA
EndDialog
EnableWindow
GetDlgItemInt
GetSystemMetrics
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
gdi32
GetClipBox
CreateFontIndirectA
DeleteObject
PatBlt
GetStockObject
msvcr71
_except_handler3
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ