testall
Static task
static1
Behavioral task
behavioral1
Sample
08e5e24cf95971369285966cacc747a3_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
08e5e24cf95971369285966cacc747a3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
08e5e24cf95971369285966cacc747a3_JaffaCakes118
-
Size
10KB
-
MD5
08e5e24cf95971369285966cacc747a3
-
SHA1
41b5515b6ac5b14845053320c67b4b47a582d4b4
-
SHA256
6cdff7a655115b3b26a9dbb670b0b9e822a8c13ba35ab4bbc65b62b8fb0ca003
-
SHA512
8bfffc935562f9bd403b5a6c2488494307cdac6963d84b7b6b7facd65fc3cf12eab785ba2a17369515ed00fa26794fb55b23963ba888d80be99d4c4d8b51e917
-
SSDEEP
96:ARgEElmy6jfcWVmz/NURMPwy5mQVez8vG3EyLFxYCH//cZpqYggjlWmpl10iD1Iq:XmyQ8TNUMwYbTI1CpfggjlW4H06/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08e5e24cf95971369285966cacc747a3_JaffaCakes118
Files
-
08e5e24cf95971369285966cacc747a3_JaffaCakes118.dll windows:4 windows x86 arch:x86
3f613b7473ddf1af7c41d055b0634784
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
GetLastError
GlobalFree
GlobalAlloc
GetModuleHandleA
FreeLibrary
lstrcatA
Process32Next
lstrcmpiA
Process32First
OpenProcess
GetCurrentProcess
lstrcpyA
MultiByteToWideChar
lstrlenA
user32
ShowWindow
FindWindowA
advapi32
DeleteService
ChangeServiceConfigA
msvcrt
strrchr
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 410B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ