Static task
static1
Behavioral task
behavioral1
Sample
29e9d33e7ed1d43afb163ed2bb2e1a9c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
29e9d33e7ed1d43afb163ed2bb2e1a9c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
29e9d33e7ed1d43afb163ed2bb2e1a9c_JaffaCakes118
-
Size
60KB
-
MD5
29e9d33e7ed1d43afb163ed2bb2e1a9c
-
SHA1
1cae469430275e985b117922f2f9cc5a7d4226ad
-
SHA256
9f8adbe3458e891caf891f336c8eb2c0aef9ad69580fb1b70f47c180abbdf98e
-
SHA512
f828b4e99a5e81dc9334e8bc27c238dca313321fed7060cb223b958cc84e4b22bc5c5b3da99481fb8f719c34eca23c4ae4630bfd600eb5c706d5b0694b62b9d7
-
SSDEEP
768:qv09kk+RzSTf4rW0yoJE2t9GmOiB9ud7SzC4Dfur:qvHkMSTf4Aou9WGoW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29e9d33e7ed1d43afb163ed2bb2e1a9c_JaffaCakes118
Files
-
29e9d33e7ed1d43afb163ed2bb2e1a9c_JaffaCakes118.dll windows:4 windows x86 arch:x86
39b088367e8d9c594056f498fc6ea432
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord921
ord912
ord121
ord207
ord198
ord392
ord236
ord358
ord894
ord67
ord320
ord874
ord546
ord545
ord690
ord559
ord254
ord456
ord394
ord360
ord172
ord818
ord304
ord307
ord826
ord823
ord824
ord767
ord825
ord347
ord927
ord763
ord415
ord337
ord413
ord119
ord228
ord229
ord506
ord322
ord323
ord457
ord500
ord498
ord857
ord502
ord887
ord594
ord416
ord419
ord519
ord523
ord515
ord140
ord558
ord496
ord242
ord381
ord854
user32
ord457
ord572
ord274
ord555
ord269
ord14
ord201
ord159
ord273
ord373
ord562
ord404
ord376
ord197
ord647
ord199
ord599
gdi32
ord464
ord460
fdct
ord1
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ