Static task
static1
Behavioral task
behavioral1
Sample
2873fc18b1f5846d40c0e5d8970d9693_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2873fc18b1f5846d40c0e5d8970d9693_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2873fc18b1f5846d40c0e5d8970d9693_JaffaCakes118
-
Size
93KB
-
MD5
2873fc18b1f5846d40c0e5d8970d9693
-
SHA1
d078ac7b112a8449ad9283882c1ea0b99f095a1b
-
SHA256
81a081d8d77140d8223842e0f46402f6340164174ab52330ca1b5e54e7bdbb98
-
SHA512
a9ca809ab191ff66fd64e1317288d2dedad33747afa66f6d72bb76200133cf2db0423aa18683520a96b6b42cadef1d274e426b3764c3d813f74f979d0c294073
-
SSDEEP
1536:hfp3HB1rksujpYuq2ibe28PtHe74AZy8rUkjEnHE6ktjchydl:Np3HB1osuuu6Ctty1y8QkjEIjchydl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2873fc18b1f5846d40c0e5d8970d9693_JaffaCakes118
Files
-
2873fc18b1f5846d40c0e5d8970d9693_JaffaCakes118.dll windows:4 windows x86 arch:x86
a2f5e105e455b838c8d9b74f9927d15c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareStringA
CompareStringW
CreateMutexA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileSize
HeapAlloc
HeapCreate
HeapDestroy
InterlockedIncrement
IsBadReadPtr
LocalFree
LockResource
RtlUnwind
SetFilePointer
TlsFree
TlsGetValue
TlsSetValue
lstrcpyA
user32
CallWindowProcA
ClientToScreen
CloseClipboard
CreateWindowExA
EnableMenuItem
GetClassLongA
GetCursorPos
GetDC
GetDlgCtrlID
GetSysColorBrush
GetSystemMetrics
GetWindowTextLengthA
LoadCursorA
MapWindowPoints
ReleaseCapture
ReleaseDC
SendDlgItemMessageA
SetActiveWindow
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ