xdmIpArOPEus
Static task
static1
Behavioral task
behavioral1
Sample
0eb690560deb40bec1a5a9f147773d43_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0eb690560deb40bec1a5a9f147773d43_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0eb690560deb40bec1a5a9f147773d43_JaffaCakes118
-
Size
264KB
-
MD5
0eb690560deb40bec1a5a9f147773d43
-
SHA1
d1a50dc8e19d535052c5a7d58dc5724cc0f6d1d4
-
SHA256
0b276f7962f2ca392ffd4d650a3efae902e9f403b5f0c0362b284feb5c5b774c
-
SHA512
e7bfb70d05ad5f3c57c50f4ff23b5c4a50348baf4d58d3ea87a4550636bf7cc8f43818cb3d463fb81aa795f0bc37d12b8215247c96e76bf881cb1da036acf1fc
-
SSDEEP
3072:JkpizQd9ossK8Yz22vOaJIi0ojJakKx7vbUUundNboOOhzIKe8h:giUD4KRz2faNJdKZzuXwhzIz8h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb690560deb40bec1a5a9f147773d43_JaffaCakes118
Files
-
0eb690560deb40bec1a5a9f147773d43_JaffaCakes118.dll windows:4 windows x86 arch:x86
2a4d9a5efb1ad61c334b4f2e1c869c72
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
FileTimeToLocalFileTime
LocalFree
LocalAlloc
CloseHandle
GetTimeFormatA
GetLastError
InterlockedCompareExchange
comctl32
ImageList_LoadImageW
advapi32
RegQueryValueExA
RegQueryValueExW
user32
GetDlgItem
SetWindowLongA
FindWindowExA
SetTimer
GetAltTabInfoW
DrawTextW
gdi32
GetTextExtentPointA
ole32
CoUninitialize
CoCreateInstance
CoRegisterClassObject
msvcrt
islower
Exports
Exports
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1014B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 993B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ