Static task
static1
Behavioral task
behavioral1
Sample
2f13b4046c2767c192f14d62880f9c26_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f13b4046c2767c192f14d62880f9c26_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2f13b4046c2767c192f14d62880f9c26_JaffaCakes118
-
Size
102KB
-
MD5
2f13b4046c2767c192f14d62880f9c26
-
SHA1
414cc6bd80628d858a7a66f402ba28f1bbb163b8
-
SHA256
e9442d40f25998db7d81ba6fac3bc5dd523aef9e111028aa3a14162a4ada0f9d
-
SHA512
39e5d109a9c2357140b5194f583c2995180e8c27f423ff3dd0f153c8010f2f556d3a5860adaeb5359d847d7b56c2d7724ba8a43e35b37a0af0828d6b7b4cb380
-
SSDEEP
1536:yOXUyxANsxszqrjobO6fUDQLYdxrX1zk45p7kHfeQD+V6d+4Y0rZON6w:VvO6s+rExqQ8dxj1zR7k/eckCNON6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f13b4046c2767c192f14d62880f9c26_JaffaCakes118
Files
-
2f13b4046c2767c192f14d62880f9c26_JaffaCakes118.dll windows:4 windows x86 arch:x86
3b6e3b0f276cd8981b021d6bbced6749
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
MessageBoxA
kernel32
ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA
advapi32
RegQueryValueA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 46KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ