start
Static task
static1
Behavioral task
behavioral1
Sample
4322ecafd1eba98835868207e5e7b7a2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4322ecafd1eba98835868207e5e7b7a2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4322ecafd1eba98835868207e5e7b7a2_JaffaCakes118
-
Size
41KB
-
MD5
4322ecafd1eba98835868207e5e7b7a2
-
SHA1
08b79341fd301ecb2a34d92e7a50f506a37757c5
-
SHA256
5d24ea62b8c496e2e1fdbf2e71daf0417a41fe6beaef8069fe6e74a71614db3a
-
SHA512
3168b41c93ef806ae712587a62c9895fd332af762d00a20136d0a2692a1f3f56a9230bc67b71535ec4435af53095d64648cc48464562d028586c5ad28b62dfc3
-
SSDEEP
768:lEO2KF87nN4UVF+cRTFHNQYS0dTmjs/OiWrDPJ6oMNarZJQdhiumXAnP:l0K8uUVFTRxHNNSCTmY/lwLO83QGRA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4322ecafd1eba98835868207e5e7b7a2_JaffaCakes118
Files
-
4322ecafd1eba98835868207e5e7b7a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
6eb6dca3609381fe1ab0e6a4ade1db16
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSAStartup
advapi32
SetSecurityDescriptorDacl
Exports
Exports
Sections
.text Size: 35KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE