input
Static task
static1
Behavioral task
behavioral1
Sample
469bc70e273490bbab3d7ac6b3e12b91_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
469bc70e273490bbab3d7ac6b3e12b91_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
469bc70e273490bbab3d7ac6b3e12b91_JaffaCakes118
-
Size
17KB
-
MD5
469bc70e273490bbab3d7ac6b3e12b91
-
SHA1
6b32af29cb8bf5847e6354ec2048938b08dbfe51
-
SHA256
22940817d94c2df60e7c11307fe657586cb12bd9f003349bb1664ce280bfc78b
-
SHA512
7552591e44e4eb5c9e886ee9984ece9c97442fd8cda003a544cef9d6be3291021e45dcb869952a65e132e64dd168aec06685c4fd3ab6b3ebbb50924294297b6e
-
SSDEEP
384:l813MpgiyB3xm50wWUMOGoYW2i2Hd/OQtWNGI:y3TBB60wWUioYpi292QtWNGI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 469bc70e273490bbab3d7ac6b3e12b91_JaffaCakes118
Files
-
469bc70e273490bbab3d7ac6b3e12b91_JaffaCakes118.dll windows:4 windows x86 arch:x86
9951ed9cbd1ac28af7ef1eef107f61ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSAStartup
advapi32
InitializeSecurityDescriptor
msvcrt
_strdup
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE