Static task
static1
Behavioral task
behavioral1
Sample
ef84612c8c29a4678fe7f1383ddd9223_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef84612c8c29a4678fe7f1383ddd9223_JaffaCakes118.dll
Resource
win10v2004-20240910-en
General
-
Target
ef84612c8c29a4678fe7f1383ddd9223_JaffaCakes118
-
Size
305KB
-
MD5
ef84612c8c29a4678fe7f1383ddd9223
-
SHA1
f99b219341ace8537ec43080e7386d7cdda866f1
-
SHA256
7982335930d90919d68bdb80bf7ee84696162ff6fb254aefbd1ecac08e53c28e
-
SHA512
75354ef2258342ed7a29059e31979743079a888e4e0c72f20a51a0edbc0f574172731a18ca1231cacc3c251e7ce7ae43a9eb7bf3a870263bb8b618e6e672dce2
-
SSDEEP
6144:CuD65ruUXr5QAz3yYKGL9WQYUOq1aVVomMPb3jSj5Xa6yA3zan5o0iwY:CuD65KIyAry5EWG+V2jPbTi5Xa6Qqn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef84612c8c29a4678fe7f1383ddd9223_JaffaCakes118
Files
-
ef84612c8c29a4678fe7f1383ddd9223_JaffaCakes118.dll windows:4 windows x86 arch:x86
03c0ede4ab0c725451bbc8809c6be036
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileA
ExitProcess
user32
GetDC
GetDesktopWindow
TranslateMessage
gdi32
GetDeviceCaps
comdlg32
ChooseColorA
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 299KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE