Static task
static1
Behavioral task
behavioral1
Sample
0876432ae3323888b03a1f6a307add7a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0876432ae3323888b03a1f6a307add7a_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0876432ae3323888b03a1f6a307add7a_JaffaCakes118
-
Size
100KB
-
MD5
0876432ae3323888b03a1f6a307add7a
-
SHA1
d715a74f6237c5ee79672e9c4b102fe37fe067e1
-
SHA256
39e71a2ed5c9cc1de888bdafdbd5b54143cd03fdfbcacbdeae3062706966b445
-
SHA512
25d2beac7a805abf739df1309d15ff07241ac3912fc05ab3c3446918cda9df40b5afe3211b438157d9cc43bac9d6325de76a8a6a5f73880ecca70b4a6877c8c7
-
SSDEEP
1536:/NFLbmbvEWmxzu8q/2v1Q594/1KMAeZBsnD0ruLn6gZolswLe+3x:lFLbdxzu8sNEnAeZVq6gxd+h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0876432ae3323888b03a1f6a307add7a_JaffaCakes118
Files
-
0876432ae3323888b03a1f6a307add7a_JaffaCakes118.dll windows:4 windows x86 arch:x86
5d783733bf03404879a269d8731f8f55
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetFileSize
RegisterWaitForInputIdle
FlushFileBuffers
GetFullPathNameA
GetProcessAffinityMask
SetConsoleInputExeNameA
SetConsoleLocalEUDC
EnterCriticalSection
GetProfileIntA
GetFileSizeEx
GetLocalTime
lstrlen
UnhandledExceptionFilter
EnumDateFormatsA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
itext Size: 8KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ