Static task
static1
Behavioral task
behavioral1
Sample
008bf4fc6048929fc7487243ab643410_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
008bf4fc6048929fc7487243ab643410_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
008bf4fc6048929fc7487243ab643410_JaffaCakes118
-
Size
198KB
-
MD5
008bf4fc6048929fc7487243ab643410
-
SHA1
f56ebdd4c596da85a52df90a479e949aae12446d
-
SHA256
5c63549eef43e58a3bd917df1923741d77bb09f10da5b28b420d960ee9a62d96
-
SHA512
5f71ebd75c0733207c1e182a294f81ee4f9ac042623070e7f56710214d4f1805a6f229c2ee7571122452eda2ce281fdd690b20095609f0252170a4b442bc9fb0
-
SSDEEP
3072:Q29QIzVqHtBufzM6X93jVpam5sPivBEmtRrkbboipOksm2T+v1+JltZrpR:p/oTWnzVplsMGmtEgm2Zthp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 008bf4fc6048929fc7487243ab643410_JaffaCakes118
Files
-
008bf4fc6048929fc7487243ab643410_JaffaCakes118.dll windows:5 windows x86 arch:x86
b0f8e18f7c4618a253806a3fbff532b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LocalFree
WaitForSingleObject
lstrlenA
CreateFileW
lstrcatW
GetOverlappedResult
VirtualAlloc
GetStartupInfoA
GetProcAddress
LoadLibraryA
GetLastError
FormatMessageA
DeviceIoControl
GetWindowsDirectoryW
CreateEventA
user32
GetMessageA
GetWindowRect
GetWindowTextA
IsDialogMessageA
KillTimer
GetDlgItem
LoadCursorA
LoadIconA
LoadImageA
LoadStringA
PostQuitMessage
RegisterClassA
ReleaseDC
ScreenToClient
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetForegroundWindow
SetTimer
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
UnregisterClassA
wsprintfA
LoadIconW
GetDC
DispatchMessageA
DestroyWindow
DestroyIcon
DefWindowProcA
CreateDialogParamA
LoadBitmapA
gdi32
DeleteObject
GetStockObject
GetTextExtentPoint32A
SelectObject
shell32
Shell_NotifyIconA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ