rand
Static task
static1
Behavioral task
behavioral1
Sample
f49b5eb9517205430fbbd66bc77a6b79_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f49b5eb9517205430fbbd66bc77a6b79_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f49b5eb9517205430fbbd66bc77a6b79_JaffaCakes118
-
Size
10KB
-
MD5
f49b5eb9517205430fbbd66bc77a6b79
-
SHA1
1fbdab3c764cbc9c78915af7e2a73ffc29ccfa60
-
SHA256
6a7b694042253fad183f7df2b1132730ada8396623c82839ff458df419ef878e
-
SHA512
86acac89aa25a8375491c5cce24385e66928643ac9f4c4e8d1e724d358b2cd58df1e494b129746d4067283c39043f1f8d0bd04ba107a5d2ac2af91b9734b2a65
-
SSDEEP
96:JQfBsV35fDyRFz4VpR2L/4jlUGv+KZRKvMWjNTXRQ0+So3PW9NkSlmU3:afy35fGR0cL/4jWYBRmx+So/WH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f49b5eb9517205430fbbd66bc77a6b79_JaffaCakes118
Files
-
f49b5eb9517205430fbbd66bc77a6b79_JaffaCakes118.dll windows:1 windows x86 arch:x86
e26ee8c5b20bc1f8c7426c5f46f27bf1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
ExitThread
GetCommandLineW
GetLastError
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
MoveFileExA
Sleep
VirtualAlloc
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE