input
Static task
static1
Behavioral task
behavioral1
Sample
e9babd6f13b85158734b5eaf9abb8c67_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e9babd6f13b85158734b5eaf9abb8c67_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
e9babd6f13b85158734b5eaf9abb8c67_JaffaCakes118
-
Size
41KB
-
MD5
e9babd6f13b85158734b5eaf9abb8c67
-
SHA1
93cb2d0883689d2b0594e5f417cbe3866e8a1e2f
-
SHA256
373342b53452b581cdea3973b8922774185d958bbe6fa710906aede899d45c98
-
SHA512
ec537042bdd34b6626603e5f7f9ccfa90b05cf758b37503d6ae874dfe29e7b20aa15e74252385be645133c723f5d015ab0f2112a79f496a19c0e343b35097d9d
-
SSDEEP
768:UF778fK+D2ggMwb/VnEnW2G/t/n/N+L/QD/dcskdpaxzS2yVS1oNNRahA+z:Up78S+8MwjJErSn/NE/QLdhkUzSNVSiy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e9babd6f13b85158734b5eaf9abb8c67_JaffaCakes118
Files
-
e9babd6f13b85158734b5eaf9abb8c67_JaffaCakes118.dll windows:4 windows x86 arch:x86
5544a558178895c012502baa823128b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
connect
advapi32
SetSecurityDescriptorDacl
Exports
Exports
Sections
.text Size: 35KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE