Static task
static1
Behavioral task
behavioral1
Sample
1a361620cc5d6b704cd78bf52201ff24_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1a361620cc5d6b704cd78bf52201ff24_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1a361620cc5d6b704cd78bf52201ff24_JaffaCakes118
-
Size
28KB
-
MD5
1a361620cc5d6b704cd78bf52201ff24
-
SHA1
cf746d50a7b3fba8829fe8d22e37f014895f41cb
-
SHA256
cb5448e7ed3a471004b2973048346d7e2d6b2cef9232fff22d2b2637f36bfe7a
-
SHA512
372487eb160aa9bb4c2e03b0f58175ee16ddfd77abf075d15569a46bf17721b075bbce75724ed9fab796bc3b51fd7f9dd4f822c2560002a8bf5c86af83f24785
-
SSDEEP
384:pjEwIIRrldEN8yjhKRUbafekwUy2YbQ9qG4Zq6hMGje9vi6:ywIIpldENfjgRUWC5PbQ9q/ZaGje
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a361620cc5d6b704cd78bf52201ff24_JaffaCakes118
Files
-
1a361620cc5d6b704cd78bf52201ff24_JaffaCakes118.dll windows:4 windows x86 arch:x86
be19b4d433b17d09832bdcf200216ec1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
HeapAlloc
GetProcAddress
LoadLibraryA
lstrcatA
GetCurrentProcess
lstrlenA
GetLastError
DeleteFileA
lstrcpyA
CloseHandle
GetPrivateProfileStringA
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
msvcrt
??3@YAXPAX@Z
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
__CxxFrameHandler
??2@YAPAXI@Z
_except_handler3
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ