Static task
static1
Behavioral task
behavioral1
Sample
f1d010f148d4b342d38b16836ad45a6d_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f1d010f148d4b342d38b16836ad45a6d_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f1d010f148d4b342d38b16836ad45a6d_JaffaCakes118
-
Size
24KB
-
MD5
f1d010f148d4b342d38b16836ad45a6d
-
SHA1
583a5641201bd3cfed7dad139280c34707178973
-
SHA256
e0925412112db4bc0f1728dcb7a1820ddc90d71797fa908ca49a1b7d9611a3d3
-
SHA512
83880e90c37d30a12f2b8d00461f50446e17800c72596035b2d2318751ff8a19e6c1922fa3a4cd704b1eb2b1213a7f1a4c8ff6dd25392d1fc5a9ea366f673026
-
SSDEEP
384:OpxWg0RwAd0r8z0Cs5LA93+T1q5+SH5RXw3sm9/ZghecaEbqNHSiPEPv:tRww0r8zZ/l+T10H56/9RBcFiPev
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1d010f148d4b342d38b16836ad45a6d_JaffaCakes118
Files
-
f1d010f148d4b342d38b16836ad45a6d_JaffaCakes118.dll windows:4 windows x86 arch:x86
2e146425f6c701be2ce3534fa088ce25
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
shlwapi
SHGetValueA
rasapi32
RasEnumDevicesA
iphlpapi
GetAdaptersInfo
user32
SetThreadDesktop
advapi32
CreateProcessAsUserA
Sections
.text Size: 13KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE