Static task
static1
Behavioral task
behavioral1
Sample
ffe794a1692afa2dd9a3f32d8ba65422_JaffaCakes118.dll
Resource
win7-20240221-en
General
-
Target
ffe794a1692afa2dd9a3f32d8ba65422_JaffaCakes118
-
Size
173KB
-
MD5
ffe794a1692afa2dd9a3f32d8ba65422
-
SHA1
3fa1f9a65b3ed9a99cfb5392c0d9619dca7644a1
-
SHA256
5f95a17232dec1d4d7de87b52c4914414ec0d70f3618ec47abbe8ae92a2462ad
-
SHA512
df975d22402a26eb94cf9dc9bdd4da5e79b85105de10f99b83a260cff645c010876876054cc5e314b2e41b4699f9260095758faf64dfd92d21324ab7d487649e
-
SSDEEP
3072:qONLuxQI4JTJlYDFS6t2NAgEaakq7MCi6TM7EHNfFln:qO5PB3ot2ygEasni6TM7EHN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ffe794a1692afa2dd9a3f32d8ba65422_JaffaCakes118
Files
-
ffe794a1692afa2dd9a3f32d8ba65422_JaffaCakes118.dll windows:5 windows x86 arch:x86
89aebe8644a760ddbd7c2e801228e7e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
TranslateMessage
kernel32
OutputDebugStringA
GetModuleFileNameA
CloseHandle
oleaut32
VarI2FromCy
msvcrt
memset
advapi32
RegOverridePredefKey
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ