Static task
static1
Behavioral task
behavioral1
Sample
45333bc0ad770e6a37a78faf18a8ea01_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45333bc0ad770e6a37a78faf18a8ea01_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
45333bc0ad770e6a37a78faf18a8ea01_JaffaCakes118
-
Size
56KB
-
MD5
45333bc0ad770e6a37a78faf18a8ea01
-
SHA1
246b2511df32c82fd1aea04fc808a603bb00e843
-
SHA256
7a1bc51104665f1d25a0d9bc7dc12b57228cf4e8043708a6de5ceed3675c106e
-
SHA512
98147f3a088645bc90f914c1a0c3dc58f24e5a001abfe5a78d2979b8cf4c1b1576e5f309dcf62bbd2a1047503f252522c7f316d2ac5a419a4323c7d03bd4f806
-
SSDEEP
768:qvZJ1GB0YRbrfMbgNGbhKjW6u6vZOP6PHpet8xvxKkkLj+EH+noGo1CR5Wqwq6wd:q/1KZMb7h6hOP6Pct8xpcSEH+nmwm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45333bc0ad770e6a37a78faf18a8ea01_JaffaCakes118
Files
-
45333bc0ad770e6a37a78faf18a8ea01_JaffaCakes118.dll windows:4 windows x86 arch:x86
1a22d672a2061959f3e31a548d389f6c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvbvm60
__vbaFixstrConstruct
__vbaFileSeek
__vbaEraseNoPop
__vbaCyVar
__vbaCyStr
__vbaCyErrVar
__vbaBoolVar
__vbaBoolStr
__vbaAryVar
user32
CreateDesktopA
CreateDialogParamA
DrawCaption
EmptyClipboard
GetMessageA
CharToOemA
kernel32
lstrcpyA
GetPrivateProfileStringA
FlushFileBuffers
EnumResourceTypesA
EnumResourceNamesA
EnterCriticalSection
CloseHandle
LocalAlloc
SetCurrentDirectoryA
Sleep
lstrlenA
lstrcpynA
GetTimeFormatA
dinput
DirectInputCreateW
ole32
OleIsCurrentClipboard
GetConvertStg
CreateILockBytesOnHGlobal
CreateFileMoniker
RevokeDragDrop
WriteClassStm
GetRunningObjectTable
CLSIDFromString
CoTaskMemFree
CreateBindCtx
oleaut32
VarI4FromDec
VarR8FromDec
VarUI1FromR8
VarUI2FromDec
VarCyCmp
VarBoolFromDisp
CreateTypeLib
SafeArrayGetVartype
SafeArraySetIID
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ