������ʼִ��
Static task
static1
Behavioral task
behavioral1
Sample
1002f7868e95b176442867590332fa2d_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1002f7868e95b176442867590332fa2d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1002f7868e95b176442867590332fa2d_JaffaCakes118
-
Size
50KB
-
MD5
1002f7868e95b176442867590332fa2d
-
SHA1
813445757655f17e53d84a2025b1fbb62100d609
-
SHA256
ebad7243253e15d6854559862ab1eadd0db08e82f027e522e94ad06988f07e12
-
SHA512
f52e3d54cd47bcaaafe58f67519b24c8dee15f130fc3a8ef8ef2ac3d65080489f0f70ee98d486c284206c51e3b061639e6a866460591ba004439a54fc1aaaeae
-
SSDEEP
384:LIdFaXq2W7RpLXO3CU9Ef4f3SfcmMzJ/wWFLzVd2iHIfw3jTTYLzZCFxgxfrJBO/:LA5tXOdqfGiUmIZwWhTpj/Bomc+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1002f7868e95b176442867590332fa2d_JaffaCakes118
Files
-
1002f7868e95b176442867590332fa2d_JaffaCakes118.dll windows:4 windows x86 arch:x86
d1b1d470695815e5d2859c5f33b4954e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
FindFirstFileA
FindClose
FindNextFileA
FreeLibrary
HeapFree
ExitProcess
HeapReAlloc
HeapAlloc
Sleep
lstrcpyA
GetProcessHeap
GetProcAddress
LoadLibraryA
GetLastError
lstrcatA
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
GetCommandLineA
user32
wsprintfA
MessageBoxA
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 738B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ecode Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ