rand
Static task
static1
Behavioral task
behavioral1
Sample
5edee36ccd145b7040dae440afc50bbb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5edee36ccd145b7040dae440afc50bbb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5edee36ccd145b7040dae440afc50bbb_JaffaCakes118
-
Size
10KB
-
MD5
5edee36ccd145b7040dae440afc50bbb
-
SHA1
6ca27d2e981c1183ba7ec3a55c9fab0ec8f08361
-
SHA256
724f8d5c1874ab9c5e0452b9c87e2fdcf3b7076ac9250121d9260c6a0fb3301c
-
SHA512
aa4357289c7680ee41d617712ce21ca4ed773672e493320e8e14a2046a75341d00e0f71e1825a45e8a52514a39966693f2d1c5f54627bed6cea85d5150ad7120
-
SSDEEP
96:Z1WrziZaQAR8xdyRgkVL8SjaMpBMcndPlczdR0f0+bbPW9NkSl:KrzVQAREyOkVASbpBMcn9lcYfFLWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5edee36ccd145b7040dae440afc50bbb_JaffaCakes118
Files
-
5edee36ccd145b7040dae440afc50bbb_JaffaCakes118.dll windows:1 windows x86 arch:x86
96fa89c2bd4a17435db0c16b55c67ed2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
DeleteFileA
ExitThread
ExpandEnvironmentStringsA
GetFileTime
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetFileTime
Sleep
WinExec
user32
MessageBoxA
wsprintfA
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE