Static task
static1
Behavioral task
behavioral1
Sample
fc978ca090c17ba9ac4d63825ec14933_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fc978ca090c17ba9ac4d63825ec14933_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fc978ca090c17ba9ac4d63825ec14933_JaffaCakes118
-
Size
90KB
-
MD5
fc978ca090c17ba9ac4d63825ec14933
-
SHA1
753c39d45e6a90c60d91a6ae353fa28fc4e7b3c1
-
SHA256
94191d29a46c7974fb2eb0c9fffa8d5d7ec940590b1112cb9940eba7ddc1d0e6
-
SHA512
50b11bcb9485686dafd1eb2da0c4356943f9b0abe2a837c58c9caa1fe6f0d536e708d69944fedbaaac2113170c5d03fc6776fc465cefba62179b543940c59bd9
-
SSDEEP
1536:xerLjvQG9R6yZJJuK0KKMu3XuY8sL0wLMtvj/YuNAG+MF7u4f7y0Nz9dGKqO:krLLQWEQJ4KKMuHYsCtvBV77y0pGKH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc978ca090c17ba9ac4d63825ec14933_JaffaCakes118
Files
-
fc978ca090c17ba9ac4d63825ec14933_JaffaCakes118.dll windows:4 windows x86 arch:x86
908f7e8d578b960f6a8a5943533782af
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
ShowCursor
ShowCaret
SetFocus
RegisterClassA
MessageBeep
LoadAcceleratorsW
IsCharLowerA
GetFocus
GetDC
GetCursor
FillRect
EqualRect
EndDialog
DrawCaption
DefDlgProcA
CreateDialogIndirectParamA
CreateDesktopA
CreateCursor
CopyRect
CharUpperA
ShowWindow
CharLowerA
kernel32
RaiseException
GetDateFormatA
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTimeAsFileTime
lstrcpynA
lstrcmpiA
lstrcatA
EnumResourceLanguagesA
OpenFileMappingA
LeaveCriticalSection
GetVersionExA
GetVersion
oleaut32
RegisterTypeLib
SafeArrayDestroy
SetErrorInfo
OleIconToCursor
SysFreeString
Sections
.text Size: 17KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ