Static task
static1
Behavioral task
behavioral1
Sample
2e321acb1360414934374299039d4a33_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2e321acb1360414934374299039d4a33_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2e321acb1360414934374299039d4a33_JaffaCakes118
-
Size
31KB
-
MD5
2e321acb1360414934374299039d4a33
-
SHA1
58a284a96cbae3d1b8b50148085a96e6615cbec9
-
SHA256
2fc8975e6f55b904df0f12461f3eb4077cf39198e163a845885f0e6c74252e45
-
SHA512
dcdb9d506ffc0a8b53ba9adb488f1227c39ceba3ee319906e74e4736acb31be4c7f3bcfadf273624c0e424df5d452390b4ebab7b35ad2693acc4ed199b9bf553
-
SSDEEP
384:C3ejMwWlTdkKpNjdB8cOuGupKlpMS7mh7dEZs6ePoonJQbjjfZXNGXEg:CMMwWftxBOKpph7dabewomp9G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e321acb1360414934374299039d4a33_JaffaCakes118
Files
-
2e321acb1360414934374299039d4a33_JaffaCakes118.dll windows:5 windows x86 arch:x86
3f30a6c47e3db7c8d58e8b3fa4243b22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
GetProcessHeap
LoadLibraryA
user32
DefWindowProcW
DialogBoxParamW
EnableMenuItem
EndDialog
GetDlgItemTextW
GetKeyState
GetWindowLongW
LoadCursorW
SendDlgItemMessageW
SetFocus
SetWindowLongW
TranslateAcceleratorW
UnhookWindowsHookEx
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.52361 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52362 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52363 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52364 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52365 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52366 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.52367 Size: 512B - Virtual size: 15B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data67 Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 650B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ