Static task
static1
Behavioral task
behavioral1
Sample
3750d83d67a4e20df3ee0d5300ef820a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3750d83d67a4e20df3ee0d5300ef820a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3750d83d67a4e20df3ee0d5300ef820a_JaffaCakes118
-
Size
88KB
-
MD5
3750d83d67a4e20df3ee0d5300ef820a
-
SHA1
6a943c61f7798fee2c9e24f38f85082f3c28fe29
-
SHA256
1ff344e342bd94dce2b02643286f7b5002e2d940942631e4b689fa27fb2fd68b
-
SHA512
394e7b7a6cd2c174e3d3260658178e91bb37382c86b5258554b1f2263c181a01b978dd2dde0d8f7499bd22142f30458e276489f8a32e42e49b3cc72fed53992e
-
SSDEEP
1536:p6osEo8N5C47Vq3XWYABOaGtu4XoyxndlxmHFBsvLkhvA:Yo2+8neBOaGtuEJq+v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3750d83d67a4e20df3ee0d5300ef820a_JaffaCakes118
Files
-
3750d83d67a4e20df3ee0d5300ef820a_JaffaCakes118.dll windows:4 windows x86 arch:x86
71704c6bf6abd5810603fe27d5932353
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FlushViewOfFile
EnumCalendarInfoExA
WriteConsoleOutputAttribute
GetPrivateProfileSectionA
IsBadWritePtr
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
atsec0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
atsec1 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
atsec2 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.atsec3 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ