input
Static task
static1
Behavioral task
behavioral1
Sample
051b0744460d524b88d9233546cb487b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
051b0744460d524b88d9233546cb487b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
051b0744460d524b88d9233546cb487b_JaffaCakes118
-
Size
20KB
-
MD5
051b0744460d524b88d9233546cb487b
-
SHA1
88ac44d976666e2d98cd16ab234d07cd7d2e67ec
-
SHA256
fa9d7215715f13eb77068f2e5ed6450a675567a43e888e49e93f57bc413133ab
-
SHA512
30549a0ec5991ece24ca2c7529bc9904ebec3a1325db34af7d323af77d0c73fadac4372f334ec73e7b8ad82daa212eb2a884950a927b0c748cb7235c57b6c63f
-
SSDEEP
384:xHxMihdqE/FimaM+7R5LGOQLRVvwsgW0bqJyw5G3:x3MEima1LG1LmW0bgysG3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 051b0744460d524b88d9233546cb487b_JaffaCakes118
Files
-
051b0744460d524b88d9233546cb487b_JaffaCakes118.dll windows:4 windows x86 arch:x86
75e7da525aa3791f096a47835def2391
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSAStartup
msvcrt
malloc
Exports
Exports
Sections
.text Size: 15KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE