Static task
static1
Behavioral task
behavioral1
Sample
007db80e2b2da4045b27e01536e50187_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
007db80e2b2da4045b27e01536e50187_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
007db80e2b2da4045b27e01536e50187_JaffaCakes118
-
Size
181KB
-
MD5
007db80e2b2da4045b27e01536e50187
-
SHA1
7073a5bcb04e6c4e2afce7fdddc6ec44cb727472
-
SHA256
d247af30caa004fe63ea801c68b856030b8776c940b00d6ffcb10bcf36d3f610
-
SHA512
eaa8720ebd2273dd6a4081ee56d6111763dba72432bc2726cddf702e6dd32cec5781780c60cd7e78651d3f553b681e7035412f8131a93d4bbfadfbfe2bf18d57
-
SSDEEP
3072:kOS2vjzU6dcBwh2+isIO+NjRdMzYhf5Vs8Ez6G6sEUFA2Gm3Nq75b+bDyGV+Kv:eqzUPBYFVIvFhNEuPUTGm3Nq7bG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 007db80e2b2da4045b27e01536e50187_JaffaCakes118
Files
-
007db80e2b2da4045b27e01536e50187_JaffaCakes118.dll windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.neolite Size: 17KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolite Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolite Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolite Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolite Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolite Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.neolite Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE