Static task
static1
Behavioral task
behavioral1
Sample
22e28b054f3c6771319f7a2e4fac0d58_JaffaCakes118.dll
Resource
win7-20240508-en
General
-
Target
22e28b054f3c6771319f7a2e4fac0d58_JaffaCakes118
-
Size
120KB
-
MD5
22e28b054f3c6771319f7a2e4fac0d58
-
SHA1
4b9ba9ad7e78849e9bc4386debd3ac14534bbd57
-
SHA256
45c7b8eae63466f27a5e33d0130f4ce390b457d64b35eea306aae054c5baa01d
-
SHA512
b6f6cff713c7a951dc0ac71647be9f8d0acdf040b87018c1d747c9f15834e1dbe0d184e0de4ffb2539d6ecacc8840d2fb51eb3d9cca64f6652ffcb7e9ea6b7e6
-
SSDEEP
1536:Aq86391AA8wqMj8D1W4hfRTsSaj/qgOoNpphoDVZcPU3JXDtqTOZmqsr2PsGA:A763918wqi8/pjaegOWAsPU3RtqaLs6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22e28b054f3c6771319f7a2e4fac0d58_JaffaCakes118
Files
-
22e28b054f3c6771319f7a2e4fac0d58_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ