Static task
static1
Behavioral task
behavioral1
Sample
363fd5a7f122046c52d9e328bd26e8cf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
363fd5a7f122046c52d9e328bd26e8cf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
363fd5a7f122046c52d9e328bd26e8cf_JaffaCakes118
-
Size
18KB
-
MD5
363fd5a7f122046c52d9e328bd26e8cf
-
SHA1
dd7e613d41506c632758d49916a6fbf5d712b2c2
-
SHA256
d1225c31fe75140bd30b611744dbc9f0007524774d05b7747bb592169e144cce
-
SHA512
949fde14da7e852e1b6b7c7c98055c761a4700161e2ff561f76953b56945cc1fe91d4071080f4bffb8eebfcc3bd6072230feff577000250d18acb641f59bfc08
-
SSDEEP
384:iIhGCHMbdHAf7Agww7AcwhxgQgpeh8AU8ciC:lcCABAsdwsLhRseh7pC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 363fd5a7f122046c52d9e328bd26e8cf_JaffaCakes118
Files
-
363fd5a7f122046c52d9e328bd26e8cf_JaffaCakes118.dll windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE