Static task
static1
Behavioral task
behavioral1
Sample
acc7b165799d5ce0276e43723a434e5c_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
acc7b165799d5ce0276e43723a434e5c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
acc7b165799d5ce0276e43723a434e5c_JaffaCakes118
-
Size
9KB
-
MD5
acc7b165799d5ce0276e43723a434e5c
-
SHA1
0ba17c638778472963bef62097f5912ce92a5f53
-
SHA256
14640f572148d9a2e54d7e276dcfd7f53a986452c6583e9a0b1489c4436cdf72
-
SHA512
c95aac979971535d8bb16cef43acb22fdf4423101e1d495ac2b768f2a327cd7fed1c39d3b0aff28186c89973c93960924c9a13fdfb8c831b291c18fb2cb9d299
-
SSDEEP
192:WZ6881X4GzGtWlNJDYsUOeAeCvmUkwT+R:WZ6881Xs8zer1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acc7b165799d5ce0276e43723a434e5c_JaffaCakes118
Files
-
acc7b165799d5ce0276e43723a434e5c_JaffaCakes118.dll windows:4 windows x86 arch:x86
f40488b04ee07c1e08a5757d8eba3317
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB Paths
Imports
msys-gcc_s-1
__deregister_frame_info
__register_frame_info
msys-2.0
__cxa_atexit
__stack_chk_fail
__stack_chk_guard
_impure_ptr
calloc
cygwin_internal
dll_dllcrt0
free
gethostname
malloc
msys_detach_dll
posix_memalign
realloc
kernel32
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
msys-perl5_26
Perl_croak_xs_usage
Perl_newSVpv
Perl_newXS_deffile
Perl_stack_grow
Perl_sv_2mortal
Perl_xs_boot_epilog
Perl_xs_handshake
Exports
Exports
__gcc_deregister_frame
__gcc_register_frame
boot_Sys__Hostname
hmod_libgcc
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 268B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ