rand
Static task
static1
Behavioral task
behavioral1
Sample
2ed516622c0cb698475f2082bb815380_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ed516622c0cb698475f2082bb815380_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2ed516622c0cb698475f2082bb815380_JaffaCakes118
-
Size
10KB
-
MD5
2ed516622c0cb698475f2082bb815380
-
SHA1
b74d157b069b69c963e8acec7efded9007ac0c42
-
SHA256
26e768278f9555a5766076b370856bcfacf319c17828a17542e0253b8092f727
-
SHA512
b34985ee55667d2f368ae2b75844de49b150a00feb92a7a8410bbc49aebdce823250eff1e864b5905f010113bc9f9c4a85f785bdd6cd9eb8cbcb22003b8fff7a
-
SSDEEP
96:Z1Eqpu+IyFvlREG5goECFfBSDNUT+1c4DPa1iygg/iDQQs1PW9NkSlq:AUImlREG25CFfBSDNAIcMa1iygCFNWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ed516622c0cb698475f2082bb815380_JaffaCakes118
Files
-
2ed516622c0cb698475f2082bb815380_JaffaCakes118.dll windows:1 windows x86 arch:x86
b598b927a6146b1ef8b218042fa6fa27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
ExitThread
ExpandEnvironmentStringsA
GetFileTime
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetFileTime
Sleep
user32
MessageBoxA
wsprintfA
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE