FindSystemManager
Static task
static1
Behavioral task
behavioral1
Sample
25df4eac31b462a9870a0c01f478b904_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
25df4eac31b462a9870a0c01f478b904_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
25df4eac31b462a9870a0c01f478b904_JaffaCakes118
-
Size
192KB
-
MD5
25df4eac31b462a9870a0c01f478b904
-
SHA1
88b070176dfea594a67047a2f13f75b3299094c5
-
SHA256
bb1caa0dace22696c2d90e5e322eb1f2f169e39086cd42b744597e980f248f80
-
SHA512
c40499c6309ec7d1ff16033de2edb3191713d1778d046d126a906decf2c138c9ccaee51c456e2568b48f2a29c517cb04023dbe57bb28a732c4fc96271b0a8780
-
SSDEEP
3072:9om05bUwk3ZxUwSBFi69VJuB8LjDspS6QN:K5b5k3ZsFPN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25df4eac31b462a9870a0c01f478b904_JaffaCakes118
Files
-
25df4eac31b462a9870a0c01f478b904_JaffaCakes118.dll windows:4 windows x86 arch:x86
b5a888d35e7bfb6fde2c50604c48699f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
GetWindowLongA
SetUserObjectSecurity
BroadcastSystemMessageA
CreateDesktopA
CloseDesktop
CharPrevA
ChangeMenuA
AnimateWindow
BeginPaint
GetClassInfoA
SetCapture
IsZoomed
MessageBoxA
RegisterClassA
OpenClipboard
CharLowerA
MessageBeep
SetClipboardData
EnumWindows
ReplyMessage
SetActiveWindow
SetCursor
SetFocus
SetWindowPos
EnableScrollBar
DeferWindowPos
CreatePopupMenu
AttachThreadInput
ChildWindowFromPoint
SetScrollInfo
CreateMenu
comctl32
ord5
InitializeFlatSB
ord3
PropertySheetA
CreateToolbarEx
ImageList_Copy
ord13
Exports
Exports
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.udata Size: 4KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ