start
Static task
static1
Behavioral task
behavioral1
Sample
1483dd7fb930d903edde100733b91928_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1483dd7fb930d903edde100733b91928_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1483dd7fb930d903edde100733b91928_JaffaCakes118
-
Size
40KB
-
MD5
1483dd7fb930d903edde100733b91928
-
SHA1
af18f268391e868b0e9eea079fefcc5685f4ef25
-
SHA256
986498362e29df8d93c43cf5448125e879b93b7de8de907c85443cf6238f0ef0
-
SHA512
ea96ea41681664d116c656f2de22905a55462fc6aae4b9862d328ab2a89e5748c29531b85de9f6a489b1abfd049ef6f3b274d160cbdd4b1017191906aded48d3
-
SSDEEP
768:upN/XBs9S0mvSyGqGE73HTImkTvSWX80okN94GUAJ:upNazgGDEbHVGvRX8dkQGUAJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1483dd7fb930d903edde100733b91928_JaffaCakes118
Files
-
1483dd7fb930d903edde100733b91928_JaffaCakes118.dll windows:4 windows x86 arch:x86
6eb6dca3609381fe1ab0e6a4ade1db16
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSAStartup
advapi32
SetSecurityDescriptorDacl
Exports
Exports
Sections
.text Size: 35KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE