Static task
static1
Behavioral task
behavioral1
Sample
2ff61a6a3418645eaec8578fed00e9c5_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ff61a6a3418645eaec8578fed00e9c5_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
2ff61a6a3418645eaec8578fed00e9c5_JaffaCakes118
-
Size
84KB
-
MD5
2ff61a6a3418645eaec8578fed00e9c5
-
SHA1
4a8c7e2dad23e11f422f0ca88734b9a8cae48975
-
SHA256
b8982e08293fd74885409f31054d7427cf0774606e5d5d19114506882113d7a7
-
SHA512
e10c1cfe9eca4a5ccd1fdee1a72abbe492f1c18a0659a50e0224bfd9e915ab0253422592e2c5b88006f318810de1429dad8fd6b6c0685c7b73fb2ddb1b90177e
-
SSDEEP
768:lkZlvbCFWnv5oj0PBqY2X2yH253/E34LGdRMLHOGUBZbQMuNgHmxQk5vtcjU6PF:lkdvOosOym84qdRMz2nEMuvQ0v+osF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ff61a6a3418645eaec8578fed00e9c5_JaffaCakes118
Files
-
2ff61a6a3418645eaec8578fed00e9c5_JaffaCakes118.dll windows:4 windows x86 arch:x86
a26e477779e640effc59fb8f589dc136
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
VirtualProtect
lstrlenA
VirtualFree
VirtualAlloc
CloseHandle
CreateThread
GetModuleHandleA
GlobalAlloc
GlobalSize
GlobalReAlloc
GlobalFree
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 642B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ