Static task
static1
Behavioral task
behavioral1
Sample
54c0238de9c656756eca2661b987c381_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
54c0238de9c656756eca2661b987c381_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
54c0238de9c656756eca2661b987c381_JaffaCakes118
-
Size
151KB
-
MD5
54c0238de9c656756eca2661b987c381
-
SHA1
25093d0e07d077d24201f3ca4de8518c2acac287
-
SHA256
7a038cb0a1c51980331678ff7ce2c441604eb8843a6ec5c02aaea3865e5f2b83
-
SHA512
cfb6708a2c1a348bd36c375465a48c4850652d14287f7cab02618ff7e67b1e6d5296e09db05a221342d48310701070ec8baa9e9e879b8cafe29c1b5498049724
-
SSDEEP
3072:xrNuvxWc1UkWmSQjNBtY+ybwBqIAAIAuNoUgumJl/NayodU+uk1RngetLM:xMvxWQUkWmJc+VBqIAdAuW7Jl/Nayoso
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54c0238de9c656756eca2661b987c381_JaffaCakes118
Files
-
54c0238de9c656756eca2661b987c381_JaffaCakes118.dll windows:4 windows x86 arch:x86
b7384e4d01a995a7f27bd1ed6e031371
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvbvm60
__vbaErase
__vbaEnd
__vbaDateVar
__vbaCyVar
__vbaCySgn
__vbaCyMul
__vbaCyI2
__vbaCyAbs
__vbaCheckTypeVar
__vbaCastObjVar
__vbaCastObj
__vbaAryVar
__vbaAryRebase1Var
kernel32
EnumResourceNamesA
lstrlenA
lstrcatA
VirtualFree
TlsAlloc
SetUnhandledExceptionFilter
SetLastError
SetCurrentDirectoryA
LeaveCriticalSection
GetStartupInfoA
GetModuleHandleA
GetLocalTime
GetCommandLineA
FlushFileBuffers
CloseHandle
ExitProcess
advapi32
LsaFreeMemory
RegOpenKeyExA
LsaGetRemoteUserName
LsaEnumerateAccountsWithUserRight
user32
IsCharLowerA
EndPaint
ActivateKeyboardLayout
GetWindowTextA
ole32
OleInitialize
CoInitialize
CoGetMalloc
OleUninitialize
CoGetClassObject
CoCreateGuid
CoUninitialize
CoCreateInstance
wininet
HttpEndRequestA
FindFirstUrlCacheEntryA
FindCloseUrlCache
dsound
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateW
DirectSoundCaptureEnumerateA
msvfw32
ICOpen
ICMThunk32
ICInstall
DrawDibStart
DrawDibSetPalette
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ