Static task
static1
Behavioral task
behavioral1
Sample
f1f924069163a51d4608346a990b2980_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1f924069163a51d4608346a990b2980_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f1f924069163a51d4608346a990b2980_JaffaCakes118
-
Size
64KB
-
MD5
f1f924069163a51d4608346a990b2980
-
SHA1
adacd43c9a0e6c9e42f3a6a1826047daa738c162
-
SHA256
497dd5c02dae611acf74fc60ddb874d62a93acdcafa3d7cd8ff5a384ce4a0905
-
SHA512
77706dba5bebd79d2b392683e1014006b439b815afd31388adc37f1ca2190f72856705d99a49e23e4834a4985e5fd79d7f90c98ef6a8dbee228a16a8768c2330
-
SSDEEP
768:dAy6erwbujtUT5+Rm0yoFMq/t9LKQ6niB9Ledjy2f0FM1EKEYuyC:d/bsgqT5+ioFQFWqezkEn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1f924069163a51d4608346a990b2980_JaffaCakes118
Files
-
f1f924069163a51d4608346a990b2980_JaffaCakes118.dll windows:4 windows x86 arch:x86
9f4d5f5adfdb8f4684b8566cbd115ed7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord312
ord284
ord395
ord289
ord417
ord849
ord858
ord178
ord829
ord774
ord522
ord365
ord477
ord560
ord565
ord855
ord798
ord329
ord476
ord419
ord397
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord864
ord385
ord722
ord443
ord377
ord441
ord214
ord304
ord305
ord811
ord362
ord364
ord509
ord512
ord511
ord795
ord513
ord822
ord594
ord444
ord447
ord525
ord528
ord515
ord225
ord552
ord318
ord406
ord793
ord553
ord657
ord550
ord551
user32
ord12
ord181
ord341
ord339
ord370
ord494
ord185
ord251
ord145
ord235
ord91
ord79
ord81
ord143
ord526
ord525
ord566
ord303
ord334
ord232
ord330
ord624
ord571
ord183
ord529
ord247
ord488
ord252
ord503
ord415
gdi32
ord326
ord329
fdct
ord1
facehelp
ord34
ord6
ord35
ord8
ord7
ord9
ord13
ord32
ord30
ord25
ord12
ord29
ord11
ord33
ord38
comctl32
ord5
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ