Static task
static1
Behavioral task
behavioral1
Sample
eb771e0da88d2a377483a24e0b5a1f37_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
eb771e0da88d2a377483a24e0b5a1f37_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
eb771e0da88d2a377483a24e0b5a1f37_JaffaCakes118
-
Size
24KB
-
MD5
eb771e0da88d2a377483a24e0b5a1f37
-
SHA1
548d9b467d83ab66a84c2fc3986b6ae8b0a0bae9
-
SHA256
674317874af5edc7e39b8c27e587baa0590b715362d1bf7a3f7c2a7c795a4d7b
-
SHA512
f88d5269049c6081c838d437cedb4b3dd3627dbb631602088252309ad7ca6e76b32efdb0a0bb45e72b6ddaeb78fd083cf9cc080f7f60162ce32f892053cad6d5
-
SSDEEP
768:9fGGfcGfNGflCtXIETtXINztXIE4tX0tXIXg:9uGkGVGdEG4ECQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb771e0da88d2a377483a24e0b5a1f37_JaffaCakes118
Files
-
eb771e0da88d2a377483a24e0b5a1f37_JaffaCakes118.dll windows:4 windows x86 arch:x86
2ab4d3bcb802f2de3449333a8953ae8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetProcessHeap
CreateThread
GetModuleFileNameA
SetFilePointer
ReadFile
GetTickCount
GetWindowsDirectoryA
lstrcpyA
lstrlenA
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
HeapFree
HeapAlloc
CloseHandle
CreateFileA
WriteFile
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
shell32
ShellExecuteA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 96B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ