Static task
static1
Behavioral task
behavioral1
Sample
5a5dce2ab7c484b01efb856037f6f591_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5a5dce2ab7c484b01efb856037f6f591_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5a5dce2ab7c484b01efb856037f6f591_JaffaCakes118
-
Size
19KB
-
MD5
5a5dce2ab7c484b01efb856037f6f591
-
SHA1
382dde521b468f316065d0fd3f0ea0382f40684d
-
SHA256
593f9ecca4c7fe7ce64711748f044fc79f26814c85ba658fb7bad60221e4d851
-
SHA512
b078f832215fd7ba5d190ba3a2725116800159221321686b5c882bd87fa10bf31a1e56785a59b80a28eaedad21de32accf523d78eb891d4e9e6e10aad8e2f6ba
-
SSDEEP
384:FOVkapIP8s6GAnLbqCjK0mC7OPSJZfHFW/pS:wVgCG+LbqCtmhkk8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a5dce2ab7c484b01efb856037f6f591_JaffaCakes118
Files
-
5a5dce2ab7c484b01efb856037f6f591_JaffaCakes118.dll windows:4 windows x86 arch:x86
0cdade62bab2758e837fddfade7cfa77
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
shlwapi
StrStrA
imagehlp
ImageDirectoryEntryToData
msvcrt
_adjust_fdiv
advapi32
OpenThreadToken
Sections
.text Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE