_StartRun@16
Static task
static1
Behavioral task
behavioral1
Sample
022284a328d25e8f1ab209e5ad63393e_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
022284a328d25e8f1ab209e5ad63393e_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
022284a328d25e8f1ab209e5ad63393e_JaffaCakes118
-
Size
24KB
-
MD5
022284a328d25e8f1ab209e5ad63393e
-
SHA1
dda0a535b565307e79eeb0046c0d45b220718a03
-
SHA256
1cd39f7279cf755d6b9cccba880753349047bd27352733f6b4506da201fe955a
-
SHA512
56eaa8554f2bec4a7f4f6e5da7f3600af0083c832d54e09af779b3183e229e329bf0ebc39eaece9b75fd8ff8d2072faa19373000ce9e48f1e3426df77dc9cfaa
-
SSDEEP
96:ym8zvMgZdx2LfnfMzSFwQidriRTkOMS076GHjKV4N+OapJiPiOh0afFJ908:ym0EgZ7cfwtdr496N+OaDiP70aNJy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 022284a328d25e8f1ab209e5ad63393e_JaffaCakes118
Files
-
022284a328d25e8f1ab209e5ad63393e_JaffaCakes118.dll windows:4 windows x86 arch:x86
b53895254c1c090c8bea34baecb5b681
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
SetFileTime
CreateFileA
GetSystemDirectoryA
SystemTimeToFileTime
GetSystemTime
GetFileTime
DeleteFileA
user32
WaitMessage
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
GetWindowLongA
SetWindowLongA
SetWindowPos
SetTimer
KillTimer
PostQuitMessage
DefWindowProcA
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
wininet
InternetQueryOptionA
InternetCheckConnectionA
msvcrt
_adjust_fdiv
malloc
_initterm
free
ldiv
sprintf
fseek
isspace
ispunct
isupper
isxdigit
fwrite
fopen
fread
fclose
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 394B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ