Static task
static1
Behavioral task
behavioral1
Sample
f6b54c97ef1383baaeb755aa5e46056c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6b54c97ef1383baaeb755aa5e46056c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f6b54c97ef1383baaeb755aa5e46056c_JaffaCakes118
-
Size
51KB
-
MD5
f6b54c97ef1383baaeb755aa5e46056c
-
SHA1
bd53a16fd680b27a47f9a4d1a456e8ac7407cb02
-
SHA256
9983e2e8b76b2abe8a9890391174f3da38bf8a784d8e02a399981f305f5b09a3
-
SHA512
a15d8cc457f023c7e02793f0573bb5031699ab4e10de6bdc89f28471cd9b9f28c0bfa42c5925d48c818f5f269670054b49bcc329a787e0a7ea521437b0a71099
-
SSDEEP
768:uQwXrZLlbizsU9t0S6B8LbRJlk7eeSpeqz4FFNm101ZN:ul7Yt0S6B8ZkQeyYFNdN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b54c97ef1383baaeb755aa5e46056c_JaffaCakes118
Files
-
f6b54c97ef1383baaeb755aa5e46056c_JaffaCakes118.dll windows:4 windows x86 arch:x86
645e8f6fdbbaa1cd4b7cf1768db65fb0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetProcAddress
RtlUnwind
Sleep
LocalAlloc
GlobalAlloc
lstrcpyA
WritePrivateProfileStringA
LocalFree
GetTickCount
GlobalFree
GetCommandLineA
VirtualProtect
FreeLibrary
user32
LoadIconA
wsprintfA
SendDlgItemMessageA
GetMessageA
DispatchMessageA
ReleaseDC
GetDlgItem
GetForegroundWindow
SetTimer
KillTimer
GetDC
FillRect
GetClientRect
FindWindowA
RegisterWindowMessageA
RegisterClassA
CreateWindowExA
SetForegroundWindow
TranslateMessage
SendMessageA
PostMessageA
PostQuitMessage
GetParent
IsWindow
SetCursor
GetCursorPos
DefWindowProcA
EndDialog
EnableWindow
GetDlgItemInt
GetSystemMetrics
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
gdi32
GetClipBox
CreateFontIndirectA
DeleteObject
PatBlt
GetStockObject
msvcr71
_except_handler3
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
__dllonexit
_onexit
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ