Static task
static1
Behavioral task
behavioral1
Sample
3cfd8452f3f2ca04aec724e07bc2aefc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3cfd8452f3f2ca04aec724e07bc2aefc_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3cfd8452f3f2ca04aec724e07bc2aefc_JaffaCakes118
-
Size
83KB
-
MD5
3cfd8452f3f2ca04aec724e07bc2aefc
-
SHA1
f9de642314044e74de981f276b3a84cce53e7ca0
-
SHA256
ea305628d400c4b9fc14809c4e56cb70e7d07433caaa3c4a765332677271c996
-
SHA512
bd376e0b88ed35a5c451a127a00ed8c68d5f106a66917b8221ce7e719d3603cc30f2cb8809a9a0e0c1df735575f4c585cf6d9b064bd21138d4522f1578ec2252
-
SSDEEP
1536:WLdHK0LnruWYGBQbTxGfZNlearo0m5dndhvBaz6CU6l1DA/Y6:Wka2bTg7l1m5xn8z6+Ml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cfd8452f3f2ca04aec724e07bc2aefc_JaffaCakes118
Files
-
3cfd8452f3f2ca04aec724e07bc2aefc_JaffaCakes118.dll windows:4 windows x86 arch:x86
e01c15b71cd3c330c4b30b274df10b8e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawCaption
DeleteMenu
CreatePopupMenu
CreateIconFromResource
CreateDesktopW
CopyRect
CharUpperBuffA
CharNextA
CharLowerA
BeginPaint
ActivateKeyboardLayout
kernel32
GetCommandLineA
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
SleepEx
Sleep
SetCurrentDirectoryA
OpenFile
LocalAlloc
CloseHandle
CompareStringA
ExitProcess
FindResourceA
FlushFileBuffers
GetLastError
GetLocalTime
GetSystemTimeAsFileTime
GetTimeFormatA
Sections
.text Size: 16KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ