input
Static task
static1
Behavioral task
behavioral1
Sample
177114098dd1788eabdb3d867bd927bd_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
177114098dd1788eabdb3d867bd927bd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
177114098dd1788eabdb3d867bd927bd_JaffaCakes118
-
Size
18KB
-
MD5
177114098dd1788eabdb3d867bd927bd
-
SHA1
eb62bb674989d7ad168532d47c6bdb2678da5451
-
SHA256
89552979c8a026eca191aa0c39cf37d9b0c702a023eeab75ca497e7ba0fdc00e
-
SHA512
b55fe6d3cdd94bbe0a75832bb57a7903627dcf4ba8d0939af3b70b7c596beaebbcb47cdf0942a034d51fca77a1f879ebe55b82bee2d352836c0a1a621a9cf78a
-
SSDEEP
384:RTk8Mn9rcXwfvN9WOdL65YWrAqFiRkCX6HHvqLgzihNzvGNVCX:WHAXw7Wfjr5Y6HHvGLvGPC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 177114098dd1788eabdb3d867bd927bd_JaffaCakes118
Files
-
177114098dd1788eabdb3d867bd927bd_JaffaCakes118.dll windows:4 windows x86 arch:x86
f09abd934e5cb9b134cfdc55f1f0ca92
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
strcpy
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE