wqQOXieeC
Static task
static1
Behavioral task
behavioral1
Sample
160b6a96103dd8ca7b69095bf0c77189_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
160b6a96103dd8ca7b69095bf0c77189_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
160b6a96103dd8ca7b69095bf0c77189_JaffaCakes118
-
Size
248KB
-
MD5
160b6a96103dd8ca7b69095bf0c77189
-
SHA1
d0ee66b0bd2bb6ac0123f40e2303478b45601f1f
-
SHA256
5204064b22a7b7233c5c57a102ba46ee0d7be2bc3bcc0350af76ea0b143b185b
-
SHA512
a07f0868a3d402ff1b44fedd393d658c69524e615f7b06b5cf55d475e2ec2c2855d0e2a4d5433aae2d6cb9985ed4015cc5336d604ab6bdcdd4055bbbe0ca67f2
-
SSDEEP
3072:TypmMoKGWunhATmKH3rim09M4dUe8LrqI9FU2b:DNn+/7iPM4d9ohv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 160b6a96103dd8ca7b69095bf0c77189_JaffaCakes118
Files
-
160b6a96103dd8ca7b69095bf0c77189_JaffaCakes118.dll windows:4 windows x86 arch:x86
02d76c393feb8d385167a85a006ffd29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
EnableWindow
GetParent
ReleaseDC
DrawTextW
DrawFrameControl
FillRect
IsRectEmpty
GetClientRect
DestroyWindow
SetWindowPos
ShowWindow
IsWindowVisible
IsIconic
ToAscii
ole32
CoTaskMemFree
CoCreateInstance
CoInitialize
CoTaskMemAlloc
Exports
Exports
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 102B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
adata Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ