Static task
static1
Behavioral task
behavioral1
Sample
08e3036f66bf4dd94362bba2b0346cb0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
08e3036f66bf4dd94362bba2b0346cb0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
08e3036f66bf4dd94362bba2b0346cb0_JaffaCakes118
-
Size
142KB
-
MD5
08e3036f66bf4dd94362bba2b0346cb0
-
SHA1
de7bef8264c5b0a7f80c3bf6eadc20ee182bea39
-
SHA256
b324cdbecc256dcccc81ef78a3374fe722214c81c19e042b0e86e7e55794c0e1
-
SHA512
23ea69c0b6ba1c3d3bf150d244470ff706385f9d622be74b0f97d53a44b25682e9512d1e03ae9f1b7b950927e2a5be45b78fe16f6a1113c1228fb3720b4cb3c6
-
SSDEEP
3072:Us6CYb6CqOyChg6g/IPq5r95ffCkx4xzOxmwvW2LR+:dXYbKwy1rn6Oh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08e3036f66bf4dd94362bba2b0346cb0_JaffaCakes118
Files
-
08e3036f66bf4dd94362bba2b0346cb0_JaffaCakes118.dll windows:4 windows x86 arch:x86
115619a453e7cb8083bac2981fda9322
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvbvm60
__vbaFixstrConstruct
__vbaFileSeek
__vbaExceptHandler
__vbaAryRecMove
__vbaForEachCollAd
__vbaAryRecCopy
user32
ShowWindow
SetCursor
OemToCharA
LoadBitmapA
GetCursor
EndDialog
DestroyCursor
CreateMDIWindowA
CreateDesktopA
dsound
DirectSoundFullDuplexCreate
DirectSoundEnumerateA
DirectSoundCreate8
shell32
ShellExecuteW
SHGetMalloc
SHGetFileInfoA
SHGetDesktopFolder
ShellExecuteExW
SHGetPathFromIDListA
advapi32
RegOpenKeyExA
RegEnumKeyA
kernel32
CloseHandle
FlushFileBuffers
GetCommandLineA
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
SetEndOfFile
ExitProcess
wininet
FindCloseUrlCache
FindFirstUrlCacheEntryA
FindFirstUrlCacheGroup
FindNextUrlCacheGroup
HttpAddRequestHeadersA
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetCanonicalizeUrlA
InternetCheckConnectionA
InternetCloseHandle
InternetConnectA
InternetCrackUrlA
InternetGetCookieA
InternetGetLastResponseInfoA
InternetGoOnlineA
InternetQueryDataAvailable
InternetSetFilePointer
InternetSetOptionExA
InternetWriteFile
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ