Static task
static1
Behavioral task
behavioral1
Sample
311c8777816675fb24d11bddfab873fb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
311c8777816675fb24d11bddfab873fb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
311c8777816675fb24d11bddfab873fb_JaffaCakes118
-
Size
42KB
-
MD5
311c8777816675fb24d11bddfab873fb
-
SHA1
b9eff322e1c22ab07e035b1982b84dbe2ead1713
-
SHA256
c4b22df61783fdb3336557e025ca9297f7aa8959908cefa26f82728ebcc933c1
-
SHA512
0e23472b3767ac1a7501558b6f337dcc8952831e7ad83fefd8c020869f0e16045ef47cadb166a3894dd2ba1ae81a7ffd1679ea038f94e71a2d07439b4f5dbc22
-
SSDEEP
768:ACFgDYX/XRnEK3K/NrNkqpRhEvgTRHSxoZx/tk0CVIHYUd2sRM9tumSS:JCDYX/xEK3WMojiSw+ZBy0rIFS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 311c8777816675fb24d11bddfab873fb_JaffaCakes118
Files
-
311c8777816675fb24d11bddfab873fb_JaffaCakes118.dll windows:5 windows x86 arch:x86
70b340b01b9609c4f2f25149072e0648
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
MessageBoxA
msvcp90
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
wininet
InternetOpenUrlA
winmm
timeGetTime
msvcr90
strstr
Sections
.text Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE