CloseKtbhlpxsjpv
Static task
static1
Behavioral task
behavioral1
Sample
199d0d748a47b516b231441150c4773f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
199d0d748a47b516b231441150c4773f_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
199d0d748a47b516b231441150c4773f_JaffaCakes118
-
Size
38KB
-
MD5
199d0d748a47b516b231441150c4773f
-
SHA1
e37115a2b66d694a1fcb2f85761c836af548bcf4
-
SHA256
e273c10ffc86cd6356c07b8c5cc03203617afb0602567a04744792ba0a0456a0
-
SHA512
2a1dbab6b3986fb6098bfc87083f20bf2d2ec114697f9995d94620b599bd812557fd96e8bdc2a04a719105d5d65bd8f14e96b41ad7029fb21013a9e7ba952d98
-
SSDEEP
768:K/NPiNDmGqwDWhXSQpoKxfnlhwsN172ZDJw2v2VQcIo7i+6RsZA7l:K1ofGhpBFR172hJJ+VhI4i+6C4l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 199d0d748a47b516b231441150c4773f_JaffaCakes118
Files
-
199d0d748a47b516b231441150c4773f_JaffaCakes118.dll windows:5 windows x86 arch:x86
f44bb6281cd23302053f5ae1123e055c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetPriorityClass
GetPriorityClass
ExitProcess
SetConsoleActiveScreenBuffer
Process32First
user32
GetMessageW
shell32
SHEmptyRecycleBinA
Shell_NotifyIconA
Exports
Exports
Sections
.icode Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
j4miovlz Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ