Static task
static1
Behavioral task
behavioral1
Sample
256b3fac024118ccd505e3d9dd536b4e_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
256b3fac024118ccd505e3d9dd536b4e_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
256b3fac024118ccd505e3d9dd536b4e_JaffaCakes118
-
Size
227KB
-
MD5
256b3fac024118ccd505e3d9dd536b4e
-
SHA1
1cceb4557091ef2b95ea378f13cfb71c3a12999c
-
SHA256
43bfd025d25ea76e14810f2ad3ec443bf0f9f7849b4d1f51d5b31a581f5c72a0
-
SHA512
ba9d13da6a4e26f4fbb85371bb7f8f89e4c272e388fdabd24df0be60e394aa19427081a7426a48925f245cabcaa3ca828f1947410022a14468be79a0c5b960f1
-
SSDEEP
6144:IcBE59qCfOIhJYGm9hnp5Q5AnCzutxhcq6REmTL3:DE59qrMWGmvnAYXDhcq6REm33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256b3fac024118ccd505e3d9dd536b4e_JaffaCakes118
Files
-
256b3fac024118ccd505e3d9dd536b4e_JaffaCakes118.dll windows:5 windows x86 arch:x86
58d3ebe9d1a527a50a9804fc408518b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcatA
GetWindowsDirectoryA
VirtualAllocEx
CreateFileA
LoadLibraryW
GetProcAddress
advapi32
RegOpenKeyExA
ole32
StgOpenStorageEx
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text2 Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ