smooth_rect
Static task
static1
Behavioral task
behavioral1
Sample
25414e9d69632290f2f4c745da7598db_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25414e9d69632290f2f4c745da7598db_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
25414e9d69632290f2f4c745da7598db_JaffaCakes118
-
Size
12KB
-
MD5
25414e9d69632290f2f4c745da7598db
-
SHA1
fbe12ade43fdf6ef11872ae4c3357969896992c5
-
SHA256
a550debbba126fb14cb752fae4700302b55eb144887e7fd0b06e7750e217ba24
-
SHA512
ccd000c8b6aaa3d3dce19da3bd38f4c1978dda2b00435ef15411d39e0c9d17ee68dd8f2fc5d13f032e84625ed4e73ba63285c1a62a518cc8626b8dc321ae9428
-
SSDEEP
192:NDD9yOxazH0dRxv1uTwot3hYkRgga0v5T4dOciopejQxDxVEA8dkru1BFlJSlKrn:3Hpc4diW0l7nv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25414e9d69632290f2f4c745da7598db_JaffaCakes118
Files
-
25414e9d69632290f2f4c745da7598db_JaffaCakes118.dll windows:4 windows x86 arch:x86
d9897786bb81b8660a6c9c9bfa5a0132
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsDebuggerPresent
Sleep
CloseHandle
CopyFileA
CreateFileA
CreateThread
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
MoveFileA
ReadFile
VirtualAlloc
WriteFile
lstrcmpA
lstrcpyA
lstrlenA
Exports
Exports
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 583B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 810B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ