func
Static task
static1
Behavioral task
behavioral1
Sample
28ab0e0184d0a1446e3ee49eb3ca3a72_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28ab0e0184d0a1446e3ee49eb3ca3a72_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
28ab0e0184d0a1446e3ee49eb3ca3a72_JaffaCakes118
-
Size
216KB
-
MD5
28ab0e0184d0a1446e3ee49eb3ca3a72
-
SHA1
018708416d25f01c101c49a97543b93b39bfff76
-
SHA256
407a6a5cf097cea20692d5be0e2361eec48aa5a7f2eaa0d83e916f5377c37236
-
SHA512
c1238ea03efc9ee03adeed74720ceafb651b171c833deea9b9d1a093f1e63078c073a8d941efa4c46c0ac2c9ded108d1fa76a8a177aef714695212d5866b9496
-
SSDEEP
3072:DdNbMJwVruvgpOadDXmORDOU0I1erU5m4mITRGunkUYEre7xPgpwi84FquAA+ybp:XVru67dDXhF11erUIITznNBSi84Kr8p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28ab0e0184d0a1446e3ee49eb3ca3a72_JaffaCakes118
Files
-
28ab0e0184d0a1446e3ee49eb3ca3a72_JaffaCakes118.dll windows:4 windows x86 arch:x86
7c2c32bf67f3f93191223cc710f14f69
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadStringA
advapi32
LookupPrivilegeValueA
ole32
CoCreateInstance
oleaut32
VariantClear
wininet
InternetCloseHandle
iphlpapi
GetAdaptersInfo
Exports
Exports
Sections
.text Size: 198KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE