rand
Static task
static1
Behavioral task
behavioral1
Sample
086ab0b7dc67aa3be7653b5aa4abf56b_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
086ab0b7dc67aa3be7653b5aa4abf56b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
086ab0b7dc67aa3be7653b5aa4abf56b_JaffaCakes118
-
Size
10KB
-
MD5
086ab0b7dc67aa3be7653b5aa4abf56b
-
SHA1
4d31d88ccc24059ed26fe1d91d870e497ff46eac
-
SHA256
3b710bffe9f57e319c7b02a96c184716d5e7f0abb33f3a51c7d7165619e5d979
-
SHA512
9660c2220b73fdb3bcb916ef45b98d942249842d7bcfc4928ae818e5a977a2a33e908db776cc1750c269df5c6a12d58d5e68c18c0a2e1569bd0ae50459ded587
-
SSDEEP
96:Z1Za6gPeGbRexdyRgOM8vRSYUaMpBMcndP1cIdndymTzehPW9NkSl:la6QeERyyOE5SPpBMcn91cyFepWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 086ab0b7dc67aa3be7653b5aa4abf56b_JaffaCakes118
Files
-
086ab0b7dc67aa3be7653b5aa4abf56b_JaffaCakes118.dll windows:1 windows x86 arch:x86
96fa89c2bd4a17435db0c16b55c67ed2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
DeleteFileA
ExitThread
ExpandEnvironmentStringsA
GetFileTime
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetFileTime
Sleep
WinExec
user32
MessageBoxA
wsprintfA
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE