Static task
static1
Behavioral task
behavioral1
Sample
5301555c3f90cb9e28edb83768b34543_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5301555c3f90cb9e28edb83768b34543_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
5301555c3f90cb9e28edb83768b34543_JaffaCakes118
-
Size
364KB
-
MD5
5301555c3f90cb9e28edb83768b34543
-
SHA1
a4bd04d866acc27f10b4dee3d35c6e721174beb8
-
SHA256
12debbad8ba6a52fc01d8a9956f81f17b4c21e42210be53f872c4841add7064b
-
SHA512
d4f6ff60dd13ce64d6c100e097d80d0c3ef616bc12daf1c83d0e387d3996bd3dfb032d890ded949a221106effc135483d21b08fa463774fd7dc99d668db83459
-
SSDEEP
6144:/e+n9bzspGrSFSFPzI2wNcc6GdSDqtaInfAI4wke6N4Rp4nJywhB:2e0pGrSscLNc8dSetacfVxfAnJy+B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5301555c3f90cb9e28edb83768b34543_JaffaCakes118
Files
-
5301555c3f90cb9e28edb83768b34543_JaffaCakes118.dll windows:4 windows x86 arch:x86
6f5d85d4c5fd6e161d4f62d75eef93b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
DrawCaption
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DefDlgProcA
CreatePopupMenu
CreateMenu
CreateDialogParamA
CreateDesktopA
CreateCursor
CreateAcceleratorTableA
CharUpperA
CharToOemBuffA
CharPrevA
kernel32
LeaveCriticalSection
lstrcpynA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
TlsAlloc
Sleep
SetCurrentDirectoryA
ReadFile
RaiseException
EnumResourceLanguagesW
EnumResourceNamesA
FindResourceA
GetModuleHandleA
LoadLibraryA
MapViewOfFile
OpenFile
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 187KB - Virtual size: 447KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE