Static task
static1
Behavioral task
behavioral1
Sample
3852ca2735abbc5e7da141ba64489527_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3852ca2735abbc5e7da141ba64489527_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3852ca2735abbc5e7da141ba64489527_JaffaCakes118
-
Size
232KB
-
MD5
3852ca2735abbc5e7da141ba64489527
-
SHA1
b05eb9ca858d28dab4766e7e1cb3705db6eb894c
-
SHA256
6386c1ce25d53073ee98367f79eadef03db50e2eec5d13d464a5250c09fefca5
-
SHA512
74679c12cfd9831b87ac2aca58832a9b87583e8a98eff25d9fd635e8ef32db192701411380afd846134e28f5451107cbdcb352405cd652d4b99c1f3742807c26
-
SSDEEP
6144:7nrLAX3ot4ectdRHycTFp+UsjkrW3hq/UXa6UYjCgplaEDg:nLO3ot4e2PHXrsIrAo/UjUfMl7Dg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3852ca2735abbc5e7da141ba64489527_JaffaCakes118
Files
-
3852ca2735abbc5e7da141ba64489527_JaffaCakes118.dll windows:4 windows x86 arch:x86
514c4c1141c3d9d3dcedb42bddd01132
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FlushFileBuffers
GetCommandLineA
GetModuleHandleA
InitializeCriticalSection
ExitThread
SetEndOfFile
Sleep
SleepEx
lstrcpynA
MapViewOfFile
ExitProcess
user32
OemToCharA
CharToOemBuffA
MessageBoxA
DeleteMenu
advapi32
RegOpenKeyExA
Sections
.text Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 114KB - Virtual size: 540KB
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ