Static task
static1
Behavioral task
behavioral1
Sample
3842ba2f4a8090e86d591b71b4a3cd79_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
3842ba2f4a8090e86d591b71b4a3cd79_JaffaCakes118
-
Size
120KB
-
MD5
3842ba2f4a8090e86d591b71b4a3cd79
-
SHA1
fa77f5701cb991e2243d566ec78b717262ccbc8d
-
SHA256
13cbd189c5e5ac2ee4a9d9670f36b42d5dc82fa7c9302471aa68e7017b12ec14
-
SHA512
5527605340d3873cb37a29c31b3aedd4e63a872adfd54d028c9c4261f8c7ac6bb5f05b5ad2cf7ce99d827f1b3d28be2cbcc9e660d2fe24b0f38c7fe80b6fa79f
-
SSDEEP
1536:PoZS4EsfJh2gias9DULLknsw/CNP6iGW7gmypMrtr8c2soJtsiCX:IS1s7ip9YsKF6iThypAYc7oEHX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3842ba2f4a8090e86d591b71b4a3cd79_JaffaCakes118
Files
-
3842ba2f4a8090e86d591b71b4a3cd79_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ