laCDfTQDml@24
Static task
static1
Behavioral task
behavioral1
Sample
0755048920e404084a2ad7507d0d2ff2_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0755048920e404084a2ad7507d0d2ff2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0755048920e404084a2ad7507d0d2ff2_JaffaCakes118
-
Size
174KB
-
MD5
0755048920e404084a2ad7507d0d2ff2
-
SHA1
d823b4445248cfadec0684c44b12bc6ff79fb791
-
SHA256
b80fa64c52cf194896bf66010e4d86a25da2619b4794e02b3d8ddabc8c6318cc
-
SHA512
37f0a650608a35c1011fd8446306fb735cbce43b25ccbc7e7da6512bff091e121c95e667d6bbd23685a2cf90dab23e105278fb48dfa402a9d232f9ae25a23268
-
SSDEEP
3072:1MD4mvHf8R/uQR1w8pv5SYV2TvImJaYi1m+gizoSEYLNtF2Zd:1Y4mUdR1wO5SGI3aY0hoSEmt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0755048920e404084a2ad7507d0d2ff2_JaffaCakes118
Files
-
0755048920e404084a2ad7507d0d2ff2_JaffaCakes118.dll windows:4 windows x86 arch:x86
e085bf2139d36260bd12d78e0ae88a0f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
GetTextAlign
SelectPalette
GetBkColor
RestoreDC
SetPixel
kernel32
VirtualAlloc
GetCurrentProcess
LocalReAlloc
ExitProcess
LocalFree
user32
InsertMenuItemA
IntersectRect
LoadBitmapA
GetSysColorBrush
IsWindowUnicode
GetWindowTextLengthA
InvalidateRect
OpenIcon
GetDC
shell32
SHGetDiskFreeSpaceA
SHGetDesktopFolder
Shell_NotifyIconW
DragQueryFileA
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 149KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ