eqshfw
Static task
static1
Behavioral task
behavioral1
Sample
4182e3e1d87ee615492073197dee8414_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4182e3e1d87ee615492073197dee8414_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
4182e3e1d87ee615492073197dee8414_JaffaCakes118
-
Size
19KB
-
MD5
4182e3e1d87ee615492073197dee8414
-
SHA1
163942f590633937afcd9f570a9b8c656e1deed6
-
SHA256
8e167707c5493d075c66312bcc99d05e4a786296c169e48913cc151d44f31d3f
-
SHA512
ca65c1ea87fe1d72710bda930f83a6b5e765f5653afd53d4acc91d8a6d006b10605994d21f1231dcc4cd0f18cd08a0d34ae1473fbd89442edb448f5ecea65354
-
SSDEEP
384:aUrohgrw4ZL5UJeIY62OKDGs7gb/+8bsjUk7Ytl:prohgrw4x2OS4Gs7I/+Qvl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4182e3e1d87ee615492073197dee8414_JaffaCakes118
Files
-
4182e3e1d87ee615492073197dee8414_JaffaCakes118.dll windows:6 windows x86 arch:x86
feee6ae3968b7e04ee1b7bd3b2c983f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcessHeap
LocalFree
lstrcpyA
lstrlenA
SetLastError
EnumResourceTypesA
HeapAlloc
comdlg32
CommDlgExtendedError
PrintDlgA
ChooseColorW
FindTextA
GetSaveFileNameW
ChooseColorA
resutils
ResUtilEnumResources
ResUtilFreeParameterBlock
ResUtilGetDwordProperty
ResUtilDupString
ResUtilGetBinaryValue
gdi32
GetObjectW
GetROP2
FillRgn
PlayMetaFileRecord
SetColorAdjustment
wininet
UnlockUrlCacheEntryFile
DeleteIE3Cache
InternetGetLastResponseInfoA
FindCloseUrlCache
GetUrlCacheConfigInfoW
InternetOpenW
InternetGetCookieA
mswsock
GetTypeByNameW
SetServiceW
TransmitFile
dn_expand
WSARecvEx
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteKeyExA
RegOpenKeyExA
RegQueryValueExW
RegSetValueExW
GetUserNameA
msvcrt
sprintf
memcpy
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ