GetHash
Static task
static1
Behavioral task
behavioral1
Sample
28c4a1b417d2b9a4b369e675ba508388_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
28c4a1b417d2b9a4b369e675ba508388_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
28c4a1b417d2b9a4b369e675ba508388_JaffaCakes118
-
Size
21KB
-
MD5
28c4a1b417d2b9a4b369e675ba508388
-
SHA1
f88ad8a7a7b90a8dc81aed6e5fd2978ed9812b9e
-
SHA256
21dd519d0a67411c061435007e333ac5de46c2aef88b04cb8135fd20f4a7f205
-
SHA512
a2e2423a663fb0dc73c762309d0c7aaa84eb6e28495c68933fb1a1a03e0ece559372279a812b773f3110ccb089fb0a315c951bd7df77a29dc44cd7953b0dd673
-
SSDEEP
384:oLhCzJPvui+belcjpej3mEAHpNDoaynSaaF3A4qvaoBTrMyh1lMuXXDfac:oL4sVWctWopka1qlfh1lMB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28c4a1b417d2b9a4b369e675ba508388_JaffaCakes118
Files
-
28c4a1b417d2b9a4b369e675ba508388_JaffaCakes118.dll windows:4 windows x86 arch:x86
5956d710a9aca8a8bb88faec16ed2f9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
Exports
Exports
Sections
Size: 19KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE