Static task
static1
Behavioral task
behavioral1
Sample
2a532d0e02e30879eb46f7b0f92ec229_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2a532d0e02e30879eb46f7b0f92ec229_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2a532d0e02e30879eb46f7b0f92ec229_JaffaCakes118
-
Size
12KB
-
MD5
2a532d0e02e30879eb46f7b0f92ec229
-
SHA1
22aeb9f80c4a7437b91b82aae262e45cc5e48b55
-
SHA256
266d393cc02af4b9aa0e83e4dd974e369c55a188bc78cb8b132295d39ba96675
-
SHA512
b59445c0eb760711fc365f0166bbd629384223bd12cdc0036ab3f9c59e86e422d7ee95ccdfbce89d75b605a4f8c52b62d525b1ad9ccdf2da927017268b310d58
-
SSDEEP
192:zamOTidCRayCUwphGheDPEDvuQ8hzMgdq4WrYHTJfm7esBd+IeprU7T:xoidKCUCuWPEDWNML4Wruupd+Iek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a532d0e02e30879eb46f7b0f92ec229_JaffaCakes118
Files
-
2a532d0e02e30879eb46f7b0f92ec229_JaffaCakes118.dll windows:4 windows x86 arch:x86
1ebbafa2fd4d059bf826f8a6cbe6c23d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetMessageA
shell32
Shell_NotifyIconA
ole32
CoUninitialize
oleaut32
SysAllocString
msvcrt
strcpy
wininet
InternetCloseHandle
shlwapi
SHGetValueA
Sections
.text Size: 6KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE