Static task
static1
Behavioral task
behavioral1
Sample
5626a5572cba1dff6400c7ab195ce36c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5626a5572cba1dff6400c7ab195ce36c_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
5626a5572cba1dff6400c7ab195ce36c_JaffaCakes118
-
Size
232KB
-
MD5
5626a5572cba1dff6400c7ab195ce36c
-
SHA1
f5f6d6550f6a043085e1dc3ae5b75ec96fc35caa
-
SHA256
97f97ab4500b9b70f3bd5a43fca8ccdc7fc340a03a9b5925d9a08bbed6d9adad
-
SHA512
406e248e39d32263d415544a8daa65fd9e69435187fdc1355530204234be4574fa11f2bdd4976938b00611c93918cb7b3ef4d6f58aacdf64328dcba3010cede1
-
SSDEEP
3072:7TX6rZA+IG1ZinRvXRVxbnEgZccVKmqtwaIi6NIh+I:H6eE4JnxrVccEmHaBNh+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5626a5572cba1dff6400c7ab195ce36c_JaffaCakes118
Files
-
5626a5572cba1dff6400c7ab195ce36c_JaffaCakes118.dll windows:5 windows x86 arch:x86
82ad43fae92d38a16b80ee0416563611
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualAllocEx
CreateFileW
user32
EndPaint
BeginPaint
UpdateWindow
ScrollWindow
SetScrollPos
SetScrollRange
AppendMenuA
CallMsgFilterW
CascadeWindows
ChangeDisplaySettingsW
CharToOemA
CheckMenuItem
CloseDesktop
CopyAcceleratorTableA
CopyRect
CreateIconFromResourceEx
CreateMDIWindowA
DdeClientTransaction
DdeCreateStringHandleW
DdeFreeStringHandle
DdePostAdvise
DdeSetQualityOfService
DeregisterShellHookWindow
DrawStateW
EndDialog
EndMenu
EnumChildWindows
GetAltTabInfo
GetClassLongW
GetClipboardOwner
GetComboBoxInfo
GetInputState
GetKeyboardLayout
PostQuitMessage
GetScrollPos
GetScrollRange
GetSubMenu
GetUpdateRect
GetWindowRgn
GetWindowThreadProcessId
IMPQueryIMEA
InSendMessageEx
InsertMenuItemA
IsCharUpperW
IsDialogMessageA
LoadKeyboardLayoutW
LockWorkStation
MoveWindow
OemToCharBuffW
RegisterClassExA
RegisterDeviceNotificationW
RemoveMenu
ScrollDC
SendDlgItemMessageA
SendMessageW
SendNotifyMessageW
SetDlgItemTextW
SetWindowWord
SystemParametersInfoW
TabbedTextOutA
TileWindows
ToAscii
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
VkKeyScanA
VkKeyScanExA
WaitForInputIdle
WindowFromDC
DefWindowProcA
LoadIconA
CreateWindowExA
GetMessageA
gdi32
TextOutA
advapi32
RegOpenKeyExA
Sections
.text Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ