rand
Static task
static1
Behavioral task
behavioral1
Sample
16c3663fd02eacb2840f6479e484a754_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16c3663fd02eacb2840f6479e484a754_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
16c3663fd02eacb2840f6479e484a754_JaffaCakes118
-
Size
10KB
-
MD5
16c3663fd02eacb2840f6479e484a754
-
SHA1
06604629436d38fa880b807487025a420aabad4a
-
SHA256
cc0dbbfd9fd28c1f0af5524fc8c6612fa0165f4f0910146e65455ad903d0d7dd
-
SHA512
407cd80ecbe7e3bf22004d9cf6b19e67a68a3e52dc38de67a51391aef361c9c6b291d58e5844b047854daba9d1a41501cb5a72a7ab8bd0725aa8cd14696c1a48
-
SSDEEP
96:JQ/35fjyn2mzGfjuD/Tw6TQ4+s3RqoWqbqX1gjF3SRQSFesPW9NkSlwd:a/35fmn2/SD/TwMQ41RU0CRQSFxWHG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16c3663fd02eacb2840f6479e484a754_JaffaCakes118
Files
-
16c3663fd02eacb2840f6479e484a754_JaffaCakes118.dll windows:1 windows x86 arch:x86
e26ee8c5b20bc1f8c7426c5f46f27bf1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
ExitThread
GetCommandLineW
GetLastError
GetTickCount
GlobalAlloc
GlobalFree
LoadLibraryA
MoveFileExA
Sleep
VirtualAlloc
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE