Static task
static1
Behavioral task
behavioral1
Sample
33f110630a6d01758f68db38ad3430ed_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
33f110630a6d01758f68db38ad3430ed_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
33f110630a6d01758f68db38ad3430ed_JaffaCakes118
-
Size
68KB
-
MD5
33f110630a6d01758f68db38ad3430ed
-
SHA1
4fe9e5b8696dcf2b14502fe7854b5f612ba2a254
-
SHA256
0e737aeab9c4231ed3f64b85e565d7c3979479b30f07861f92ec95d16e448178
-
SHA512
eaef3cb82f719ebd15cc45842e86a923069460529f7421014453333ed9d4145402312d7f629cf987df722c54c20618062d1b0baa7ad1d5f7d24d086227ba4d9b
-
SSDEEP
1536:yG3z4mQRTtXR+Z91q3qiLBp5/hrTYKacCq4NoS04o:yEv65h+H2Lhhr0K/L4V0B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33f110630a6d01758f68db38ad3430ed_JaffaCakes118
Files
-
33f110630a6d01758f68db38ad3430ed_JaffaCakes118.dll windows:4 windows x86 arch:x86
aa776dc9620e5f256b6a8ec85138f009
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLastError
GetSystemWindowsDirectoryA
SetComputerNameA
GetComputerNameA
VirtualProtect
ExitProcess
user32
GetForegroundWindow
GetSubMenu
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.new1sec Size: 8KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsec Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ