Static task
static1
Behavioral task
behavioral1
Sample
2dd1cbd4e84e214ce254fa756595424c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2dd1cbd4e84e214ce254fa756595424c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2dd1cbd4e84e214ce254fa756595424c_JaffaCakes118
-
Size
52KB
-
MD5
2dd1cbd4e84e214ce254fa756595424c
-
SHA1
b1d62669578c10b68facf0eab6953c5fdd574995
-
SHA256
a079a6f7e545258808d3e22b93abde06da431f307125e2799eb4e46aa6b32226
-
SHA512
717ffc9a79d9e50872eec068b17635683d994c0c30d033a5d96b8bc0bf5adfb6f56ab0cd25261a2663cfdf178a8f3ebb110d7102d7198ea6b89b8ce281f47a67
-
SSDEEP
768:+5Of4SEw+q8dgeNk4OzoOcAA2AzcNpBEPzNR68X2CfANiDQNeD8nz14BMd2zGtVw:+0fZ4k9cpcPK7XhflD2D4gXT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2dd1cbd4e84e214ce254fa756595424c_JaffaCakes118
Files
-
2dd1cbd4e84e214ce254fa756595424c_JaffaCakes118.dll windows:4 windows x86 arch:x86
8cdc878cbde5d48ab7582e631d40d036
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
FindWindowA
Sections
.text Size: 46KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE