Static task
static1
Behavioral task
behavioral1
Sample
f66ddf751ac9b2a5b8fa84737871f7fc_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f66ddf751ac9b2a5b8fa84737871f7fc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f66ddf751ac9b2a5b8fa84737871f7fc_JaffaCakes118
-
Size
57KB
-
MD5
f66ddf751ac9b2a5b8fa84737871f7fc
-
SHA1
14435148d82c45aa1e8acf78866702cb03ab8953
-
SHA256
7b3bb992e9f930d74d5d6b2c7be997f4a5b54251ea7861e2f1d82c2fa47c3bc0
-
SHA512
2310568f6d183bd21361109a7085a234b084f71a5395c8f7b170e95ad6b60b80bacc8d78fdc58485e94d843a7673d0278f672303ec059237194529cfee4fd3c5
-
SSDEEP
1536:jrVYwPXAjXsK590s0tkrpVUEkJ+H0jYJqXoxHOTMdog:KwPXAZ5909Kr0EUG0jxX6OQig
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66ddf751ac9b2a5b8fa84737871f7fc_JaffaCakes118
Files
-
f66ddf751ac9b2a5b8fa84737871f7fc_JaffaCakes118.dll windows:4 windows x86 arch:x86
ce8a8552016dfed27baac7c3c6d69c6d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
GetLastError
FreeLibrary
LocalFree
GetModuleHandleW
GetProcAddress
LoadLibraryW
lstrcmpiW
lstrcpynW
GetCommandLineA
MultiByteToWideChar
lstrcatW
FormatMessageW
lstrcpyW
GetProfileStringW
lstrcmpA
lstrcpynA
lstrlenW
GetWindowsDirectoryW
VirtualProtect
WideCharToMultiByte
VirtualAlloc
user32
GetDlgItem
MessageBoxW
GetWindowTextW
GetWindowTextLengthW
LoadStringW
GetFocus
SetFocus
EnableWindow
SendMessageW
SetDlgItemTextW
LoadIconW
SendDlgItemMessageW
EnumDisplayDevicesW
DialogBoxParamW
EndDialog
GetWindowLongW
SetWindowLongW
MoveWindow
ScreenToClient
GetWindowRect
wsprintfW
gdi32
GetDeviceCaps
DeleteDC
msvcr71
_adjust_fdiv
_initterm
malloc
free
_onexit
_wcsdup
_wsplitpath
_wcsicmp
memmove
_except_handler3
__dllonexit
__CppXcptFilter
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ