Static task
static1
Behavioral task
behavioral1
Sample
53bbfa8c7c5ad2fa0e80dcebe4a1a640_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
53bbfa8c7c5ad2fa0e80dcebe4a1a640_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
53bbfa8c7c5ad2fa0e80dcebe4a1a640_JaffaCakes118
-
Size
51KB
-
MD5
53bbfa8c7c5ad2fa0e80dcebe4a1a640
-
SHA1
812061b327384ecc162f7c15945dca391476784b
-
SHA256
aa89658d03e44b0b900a2f29968d40a4a1afb443dbe799d687787ed0ddf1b4db
-
SHA512
782115be0162b0ea51996f5f3119bbdf2aa90eb2e0c7dd8cb3fa3b60bc87a8740cf7871004f98b8f848f086fa1c2edb2ecdae94db023549d553558650c0d9280
-
SSDEEP
1536:o6xFM7HeBXv7BjcyyjLC2ITNNqQ9FU5+Vh:o6x+7+dv5ALINqQS+Vh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53bbfa8c7c5ad2fa0e80dcebe4a1a640_JaffaCakes118
Files
-
53bbfa8c7c5ad2fa0e80dcebe4a1a640_JaffaCakes118.dll windows:5 windows x86 arch:x86
b9a2a179dfc8495b09d28f93cda43ad5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCombineW
UrlGetPartA
UrlGetLocationW
user32
MessageBeep
DialogBoxIndirectParamA
DispatchMessageW
TranslateMessage
MessageBoxW
SendMessageA
GetDC
advapi32
RegCloseKey
shell32
SHGetDiskFreeSpaceExA
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ