Static task
static1
Behavioral task
behavioral1
Sample
184d2d1b2049a0c34cc10ba03834a694_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
184d2d1b2049a0c34cc10ba03834a694_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
184d2d1b2049a0c34cc10ba03834a694_JaffaCakes118
-
Size
72KB
-
MD5
184d2d1b2049a0c34cc10ba03834a694
-
SHA1
f2fdaa21cb4a915d869de888c81112051adda917
-
SHA256
63c4a0f60e52f5d7572be0f643e86e4ba88a1dbb977d9b97d30073ae27b7bd5d
-
SHA512
1fca5433648870e96fdda9f67fc39064da31ea0d27ad32490470a49d03ba5f894e2249cba53441574817f6d82c38b71f021d19d2ee1a0084df26a2bef9e4547a
-
SSDEEP
1536:21zO6DYjOEHW0lwVpG3IavZFSxwo1vZU25+bpe+E5Gq9g:2FU6G3HXSxw0v2RIL9g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 184d2d1b2049a0c34cc10ba03834a694_JaffaCakes118
Files
-
184d2d1b2049a0c34cc10ba03834a694_JaffaCakes118.dll windows:4 windows x86 arch:x86
4a9931a0868ded81f1ed128df77be6d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
ConvertStringSidToSidA
ObjectOpenAuditAlarmA
ImpersonateNamedPipeClient
GetTraceEnableFlags
ElfNumberOfRecords
RegisterEventSourceA
kernel32
RtlUnwind
lstrlenW
lstrcatA
SetProcessWorkingSetSize
SetLastError
MultiByteToWideChar
IsBadStringPtrA
CloseHandle
ExitProcess
FormatMessageA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetSystemInfo
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapReAlloc
ole32
CoCreateInstance
CoTaskMemFree
IsEqualGUID
CLSIDFromString
setupapi
SetupDiAskForOEMDisk
SetupCloseFileQueue
SetupDiGetINFClassA
olepro32
OleTranslateColor
OleLoadPicture
OleCreatePropertyFrameIndirect
OleCreateFontIndirect
OleCreatePropertyFrame
user32
AppendMenuA
CheckRadioButton
CloseClipboard
CreatePopupMenu
DestroyWindow
DialogBoxParamA
EnableMenuItem
EnumChildWindows
ExitWindowsEx
GetClassLongA
GetMenuItemCount
GetMenuItemID
GetWindowDC
KillTimer
LoadIconA
LoadMenuA
MessageBoxA
PostMessageA
RedrawWindow
ScreenToClient
SendMessageA
SetClassLongA
SystemParametersInfoA
Sections
.text Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ