input
Static task
static1
Behavioral task
behavioral1
Sample
270a53eae6fd21baaf178d0cc672b322_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
270a53eae6fd21baaf178d0cc672b322_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
270a53eae6fd21baaf178d0cc672b322_JaffaCakes118
-
Size
18KB
-
MD5
270a53eae6fd21baaf178d0cc672b322
-
SHA1
98c5930471ad1268ed15c34102ab9c14582c856c
-
SHA256
4ed19dbe83791bc67016ac0bdffc0d1b40c7a632649c1d35589b4de9b3323a7e
-
SHA512
69ca172d0af0f68c9244fd1e3cb4f4e11398503b1efb5f858422da1ffe7c39d678a5bd0d3d4f64f992dccb71372aa53874e454e3d0467a9a86612051043f5ad9
-
SSDEEP
384:tT9az6Lch1d8o0fC0HeNg7bosCY/jZrm18mUMhNeCIh:tg8fbey7bxjFbMCCIh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 270a53eae6fd21baaf178d0cc672b322_JaffaCakes118
Files
-
270a53eae6fd21baaf178d0cc672b322_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f97f63859212386c808ea36baae8600
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
SetSecurityDescriptorDacl
msvcrt
strcpy
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE