Static task
static1
Behavioral task
behavioral1
Sample
377a7287f4fdd2bd01c6e8035d9128bf_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
377a7287f4fdd2bd01c6e8035d9128bf_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
377a7287f4fdd2bd01c6e8035d9128bf_JaffaCakes118
-
Size
262KB
-
MD5
377a7287f4fdd2bd01c6e8035d9128bf
-
SHA1
4eb0a12fcb11a3b9b8bb8527413af3941a49d541
-
SHA256
d8b5e0186c96fec1cb3ecba448aed51c1ec8b73f9a03b59bd146305e1dec8a1b
-
SHA512
9c61e9810813adff5e017e6f640e6ac510a8315fe95057f82edc64e81fe657ed200db168ec4266e8550f314fe7cd842dc3d8931c1eb5dfa0c58df1b1fe2359b9
-
SSDEEP
6144:qsWq6DvAYvfNnGZ1fpyVUORMxypzXHv93wDkXG5FroJ6Ru:dWq6DvAMOfpyVbRMOzXHv93skXG5Frox
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 377a7287f4fdd2bd01c6e8035d9128bf_JaffaCakes118
Files
-
377a7287f4fdd2bd01c6e8035d9128bf_JaffaCakes118.dll windows:4 windows x86 arch:x86
5060abe15cb6f80e856c6c12d2e130ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
OffsetRect
SetCursor
SetFocus
MessageBoxA
ShowCaret
ShowOwnedPopups
LoadImageA
LoadCursorA
IsCharLowerA
GetDlgItem
GetCursor
FillRect
EnableScrollBar
CreateMDIWindowA
CreateIconFromResource
CreateCursor
CopyImage
CharUpperBuffA
SetMenuInfo
CharNextA
kernel32
GetSystemTimeAsFileTime
TlsAlloc
WriteFile
lstrcmpA
MapViewOfFile
oleaut32
OleTranslateColor
RegisterTypeLib
SafeArrayDestroy
SetErrorInfo
GetErrorInfo
OleLoadPicture
SysStringLen
Sections
.text Size: 15KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ