Static task
static1
Behavioral task
behavioral1
Sample
10a1f49a58e55ed7c53439e0c5973103_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10a1f49a58e55ed7c53439e0c5973103_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
10a1f49a58e55ed7c53439e0c5973103_JaffaCakes118
-
Size
171KB
-
MD5
10a1f49a58e55ed7c53439e0c5973103
-
SHA1
e7aab6b43de5cc5e9341035d9f9106046aca6a81
-
SHA256
2fd533f7f41c6b203e737082db1943fb6988c23979ed3e53b9ced104778e7d46
-
SHA512
e4efdce3097cc8a7c2cad1c8d85d3c5a1d92fa8d5dbd74d0ac67c93906e6492b56487a3d9996bdaa696706e731bba229c3a1074960a4ffff217c033d8681b7c0
-
SSDEEP
3072:9EqFi1Fj/R2T3dIggWin7AWGFWT5Sb5z/2wxMAmlfX:BiL2T4oFWTMB+KMAAf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10a1f49a58e55ed7c53439e0c5973103_JaffaCakes118
Files
-
10a1f49a58e55ed7c53439e0c5973103_JaffaCakes118.dll windows:5 windows x86 arch:x86
a6db81ed16e57ae785b333768410646b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ReadFile
VirtualAlloc
gdi32
CreateCompatibleDC
CreateFontIndirectW
CreatePen
CreatePolygonRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
EnableEUDC
EnumFontFamiliesW
ExtTextOutA
ExtTextOutW
FillRgn
GetBitmapBits
CreateCompatibleBitmap
GetObjectW
GetRgnBox
GetStockObject
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
OffsetRgn
CreateBitmap
Rectangle
SelectObject
SetBitmapBits
SetBkColor
SetTextColor
StretchBlt
TranslateCharsetInfo
BitBlt
GetFontData
PatBlt
comdlg32
ChooseFontW
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegOpenKeyExW
shell32
ShellAboutW
imm32
ImmSetConversionStatus
ImmSetCompositionStringW
ImmRegisterWordW
ImmIsIME
ImmAssociateContext
ImmConfigureIMEW
ImmCreateContext
ImmDestroyContext
ImmEnumRegisterWordW
ImmEscapeW
ImmGetCompositionStringW
ImmGetConversionStatus
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444445 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f444444 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 766B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ