Static task
static1
Behavioral task
behavioral1
Sample
0b7fb2ac6a08641490497ca0bf82a8dc_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0b7fb2ac6a08641490497ca0bf82a8dc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0b7fb2ac6a08641490497ca0bf82a8dc_JaffaCakes118
-
Size
247KB
-
MD5
0b7fb2ac6a08641490497ca0bf82a8dc
-
SHA1
b27b33dca2b543d455a2d482d9c0737288feb1cb
-
SHA256
0ece8337398e196689823e457f5d8f89c29f67926bbfae472d17bac7ecba232f
-
SHA512
88374491c5574c01d70c93fe3d26567ffdd0e24afce85e3e78308acb6cb1db97141a69062298b2a9510191803653b567a3c94289007f918d692d6ca5588c1e7e
-
SSDEEP
6144:b1At9BrxHS28w6zfENsaSSlip2v2UiSyPR1moAm0:b1At95xHZafEyFwv2mwDL0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b7fb2ac6a08641490497ca0bf82a8dc_JaffaCakes118
Files
-
0b7fb2ac6a08641490497ca0bf82a8dc_JaffaCakes118.dll windows:4 windows x86 arch:x86
fc7ecdc2a0edc76bb750a5da087d073a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
ExitProcess
GetModuleHandleA
lstrlenW
GetOEMCP
LoadLibraryExA
VirtualAlloc
GetCommandLineW
GetACP
LoadLibraryA
ExitThread
IsBadHugeReadPtr
GetProcAddress
comdlg32
FindTextA
GetOpenFileNameA
ChooseColorA
user32
GetWindowPlacement
IsZoomed
GetTopWindow
GetWindowLongW
KillTimer
InsertMenuItemA
GetWindow
IsWindowVisible
IsWindowUnicode
GetSysColorBrush
GetWindowDC
GetWindowLongA
InsertMenuA
IsWindow
IsRectEmpty
GetSubMenu
GetWindowThreadProcessId
IsWindowEnabled
IsIconic
IsDialogMessageA
GetScrollRange
GetWindowRect
GetWindowTextA
IntersectRect
IsChild
InvalidateRect
GetSystemMenu
InflateRect
GetSysColor
IsDialogMessageW
Sections
CODE Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ