aaa
Static task
static1
Behavioral task
behavioral1
Sample
2ebfb11bcc962b57baa41cb8b2e33884_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ebfb11bcc962b57baa41cb8b2e33884_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2ebfb11bcc962b57baa41cb8b2e33884_JaffaCakes118
-
Size
12KB
-
MD5
2ebfb11bcc962b57baa41cb8b2e33884
-
SHA1
3dcc70913fc0e9cd32580463514bb0ad4df52728
-
SHA256
e0be16fdcc8e3e6a2cd7bf7cf75ee5bc77725d175a4af3fcc0a77edaf4e98e0d
-
SHA512
823c3ca0847b4110cd89b17b3a7c9458c73ab2c77ad986f469a5d3fcf50e6d1ab7c42c0f27bae300e7737ff9d2865a19aa21ff8550aca1b52b4c28ceb6937ce8
-
SSDEEP
192:MICV3YTxmJXGbyIW7qSpz/XO3CUT5EfUZK2qR:MIdFaXqxW7RpLXO3CU9EfUZbqR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ebfb11bcc962b57baa41cb8b2e33884_JaffaCakes118
Files
-
2ebfb11bcc962b57baa41cb8b2e33884_JaffaCakes118.dll windows:4 windows x86 arch:x86
d1b1d470695815e5d2859c5f33b4954e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenA
FindFirstFileA
FindClose
FindNextFileA
FreeLibrary
HeapFree
ExitProcess
HeapReAlloc
HeapAlloc
Sleep
lstrcpyA
GetProcessHeap
GetProcAddress
LoadLibraryA
GetLastError
lstrcatA
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
GetCommandLineA
user32
wsprintfA
MessageBoxA
Exports
Exports
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 738B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ