Static task
static1
Behavioral task
behavioral1
Sample
2859cb77451614f2080fd27f9730f022_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2859cb77451614f2080fd27f9730f022_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2859cb77451614f2080fd27f9730f022_JaffaCakes118
-
Size
247KB
-
MD5
2859cb77451614f2080fd27f9730f022
-
SHA1
420c16667cc9adfdd1a76491cdd756a97a33dabf
-
SHA256
e00b15c41d46a3518a4582ff2721ecbfd2454df229c26588086647100d4f18e5
-
SHA512
3767c4750463994f5286328e5bba04f69c7ff3c4572339e63a5333e838452ac8a9974e2a2c30cd634a3131fbe50e6ae137c080e6b7aa24c7b819a3e0effdd166
-
SSDEEP
6144:b1At9BrxHS28w6zfENsaSSlip2v2UiSyPR1moAmf:b1At95xHZafEyFwv2mwDLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2859cb77451614f2080fd27f9730f022_JaffaCakes118
Files
-
2859cb77451614f2080fd27f9730f022_JaffaCakes118.dll windows:4 windows x86 arch:x86
fc7ecdc2a0edc76bb750a5da087d073a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
ExitProcess
GetModuleHandleA
lstrlenW
GetOEMCP
LoadLibraryExA
VirtualAlloc
GetCommandLineW
GetACP
LoadLibraryA
ExitThread
IsBadHugeReadPtr
GetProcAddress
comdlg32
FindTextA
GetOpenFileNameA
ChooseColorA
user32
GetWindowPlacement
IsZoomed
GetTopWindow
GetWindowLongW
KillTimer
InsertMenuItemA
GetWindow
IsWindowVisible
IsWindowUnicode
GetSysColorBrush
GetWindowDC
GetWindowLongA
InsertMenuA
IsWindow
IsRectEmpty
GetSubMenu
GetWindowThreadProcessId
IsWindowEnabled
IsIconic
IsDialogMessageA
GetScrollRange
GetWindowRect
GetWindowTextA
IntersectRect
IsChild
InvalidateRect
GetSystemMenu
InflateRect
GetSysColor
IsDialogMessageW
Sections
CODE Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ