Static task
static1
Behavioral task
behavioral1
Sample
146f0fa2b0e0064c827e3be2e90f3ad0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
146f0fa2b0e0064c827e3be2e90f3ad0_JaffaCakes118.dll
Resource
win10v2004-20240910-en
General
-
Target
146f0fa2b0e0064c827e3be2e90f3ad0_JaffaCakes118
-
Size
245KB
-
MD5
146f0fa2b0e0064c827e3be2e90f3ad0
-
SHA1
37fa6c5c52e7339e39419d71d28ccf0412cc2ce5
-
SHA256
e975c1540f8517969368ea0bd9a5dc9e296eeb6fc7cd3259a35ce33639140954
-
SHA512
6e0b0929d62d13245c306f6cf6ca367ae4dbc276c3183c6a4091016386b2d5aa48d7dd4210590c4e1c477dc5a6cd85162cc76dd7cf4c9a0a6caa4f23eb67a212
-
SSDEEP
6144:nrdX1ZtaP5h6egrpp9LXThZLFeT98uKl2L1:rdXA/7grT9LThZLsO/lS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 146f0fa2b0e0064c827e3be2e90f3ad0_JaffaCakes118
Files
-
146f0fa2b0e0064c827e3be2e90f3ad0_JaffaCakes118.dll windows:4 windows x86 arch:x86
a04241b1962419295d241cf08da8db6c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
gdi32
GetCurrentPositionEx
CreateFontIndirectA
SelectObject
LineTo
user32
SetActiveWindow
RegisterWindowMessageA
RegisterClipboardFormatA
OemToCharA
MessageBeep
PeekMessageA
ScreenToClient
SendMessageW
RemoveMenu
MapVirtualKeyA
RegisterClassA
ReleaseCapture
LoadStringA
RemovePropA
PeekMessageW
OffsetRect
RedrawWindow
LoadKeyboardLayoutA
OpenClipboard
PtInRect
PostMessageA
MessageBoxA
LoadCursorA
LoadIconA
PostQuitMessage
ScrollWindow
SendMessageA
ReleaseDC
LoadBitmapA
MapWindowPoints
kernel32
GlobalAlloc
GetACP
LoadLibraryA
lstrlenA
lstrlenW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
IsBadHugeReadPtr
VirtualAlloc
GetVersionExA
ExitThread
ExitProcess
GetCommandLineA
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fdata Size: 1024B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ