SvchostEntry_W32Time
Static task
static1
Behavioral task
behavioral1
Sample
5e63614436d6372dae2871110d33adc8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e63614436d6372dae2871110d33adc8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5e63614436d6372dae2871110d33adc8_JaffaCakes118
-
Size
65KB
-
MD5
5e63614436d6372dae2871110d33adc8
-
SHA1
ed0464b945ad21022e4b35180f77f8473d82fab7
-
SHA256
7807004b7768bba8b20f916c73bbca513981c7057d9606c0eb225edc81e10620
-
SHA512
c3e356ef40a4592d8a25fbf98e75f9160c9f0c6c6ac4db000132e09a5a37a78517eb8462cc4f0c411dbcf25ba007050d8e48cf7a4caabd5f2b063ebd21718e46
-
SSDEEP
1536:r5nMjS8+HO1svVUebJxuotjCO9+OTctVIK6QfAVeZ:1n+PstUYJxTCOrcj6X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e63614436d6372dae2871110d33adc8_JaffaCakes118
Files
-
5e63614436d6372dae2871110d33adc8_JaffaCakes118.dll windows:4 windows x86 arch:x86
2636793da29b5afa38767b6d2831f57f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
shell32
ShellExecuteA
gdi32
DeleteDC
psapi
GetModuleFileNameExA
ws2_32
WSAStartup
winmm
waveInUnprepareHeader
user32
GetDesktopWindow
advapi32
GetTokenInformation
ole32
CoInitializeEx
oleaut32
SysFreeString
msvfw32
ICCompress
msvcrt
fread
Exports
Exports
Sections
.text Size: 53KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE