Static task
static1
Behavioral task
behavioral1
Sample
07e0aee1102107334ce98905b0acd5cb_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07e0aee1102107334ce98905b0acd5cb_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
07e0aee1102107334ce98905b0acd5cb_JaffaCakes118
-
Size
11KB
-
MD5
07e0aee1102107334ce98905b0acd5cb
-
SHA1
91a4b2861a7d377b1e37e983464d6c994c49e62c
-
SHA256
4e154d1eb84f6fee2427731432cbdc3972fe25330669e60508324fcc29ccc44b
-
SHA512
82f7a3a23b7e5b5f6599dcdc4e90e3100a515d4453e95af704aebd4888e80b6b7fac8992fe20aa2b28f8f5b8a87f11d8d48e9fcbcf156ecafb001e2602310b27
-
SSDEEP
192:wa4beH2ryQvnm1iqYNSDc0dOj9PBBT4MVLbym31bo:P4KWryQ+1iqYNSAhFhBF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e0aee1102107334ce98905b0acd5cb_JaffaCakes118
Files
-
07e0aee1102107334ce98905b0acd5cb_JaffaCakes118.dll windows:4 windows x86 arch:x86
123a4199790f67f6d12e16db71236286
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
AddAtomA
CloseHandle
ExitProcess
GetLastError
GetModuleHandleA
GlobalFree
ResetEvent
SetEvent
Sleep
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ