_aaa@4
Static task
static1
Behavioral task
behavioral1
Sample
4bf457597d9ec9b22f5845757df7403c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4bf457597d9ec9b22f5845757df7403c_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
4bf457597d9ec9b22f5845757df7403c_JaffaCakes118
-
Size
36KB
-
MD5
4bf457597d9ec9b22f5845757df7403c
-
SHA1
be9dc111e85c1a5fe3e56d5164c785730a94814e
-
SHA256
e4f3deca0ab186cb9bfc270be2e5e7cf0059612481894ca68a3b69366abdae52
-
SHA512
898f6271222a0272af3e0672717641fca1c91b5526ffb4da391817dd3bc9597a166c4057dffec490484341ab4c4a92a4c28be2a0d023d1f17a0ce8007cb2aa11
-
SSDEEP
384:oxCZHDu6fDWriKSD4iccNmOk05GXuwOkl3qQ41NOmp0T7rA:oCHEzWdrsw3q3xUNOmG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4bf457597d9ec9b22f5845757df7403c_JaffaCakes118
Files
-
4bf457597d9ec9b22f5845757df7403c_JaffaCakes118.dll windows:4 windows x86 arch:x86
e11c377719b26e2a7048ad75209fa506
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForMultipleObjects
CreateThread
VirtualProtect
HeapAlloc
GetLastError
HeapCreate
Sleep
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 367B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 305B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ