rand
Static task
static1
Behavioral task
behavioral1
Sample
ff381c260ef78e87d430acc29ebed69c_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff381c260ef78e87d430acc29ebed69c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
ff381c260ef78e87d430acc29ebed69c_JaffaCakes118
-
Size
10KB
-
MD5
ff381c260ef78e87d430acc29ebed69c
-
SHA1
6b3b5a68d932aee09319251b0fd8baffd78e976a
-
SHA256
28fc1ff842bc3a7f50957d5ead3e33930be04bb0e7b4fe9cb29b61d00fb8abc7
-
SHA512
c423d6c5aea17f1bd91e63f53e8ef484588f8d9ac2dc9ec01c338df171084928cedbbce29a8d86f44bb32746ab57fab50a1a9f7fcec92431da7da39c1705ce79
-
SSDEEP
96:Z1ZaUzDR2y5g1gzdtSTAFQEc5z+m5c6uAPpPW9NkSl:daEDR2y21gptSTAFTcz5AAPRWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff381c260ef78e87d430acc29ebed69c_JaffaCakes118
Files
-
ff381c260ef78e87d430acc29ebed69c_JaffaCakes118.dll windows:1 windows x86 arch:x86
d11c7656e7a202a9878c8f2fd8789a21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
DeleteFileA
ExitThread
ExpandEnvironmentStringsA
GetFileTime
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetFileTime
Sleep
user32
MessageBoxA
wsprintfA
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE