kopawemj
Static task
static1
Behavioral task
behavioral1
Sample
5f1d5fa547ad2616f882e1b40ac40b33_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5f1d5fa547ad2616f882e1b40ac40b33_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5f1d5fa547ad2616f882e1b40ac40b33_JaffaCakes118
-
Size
424KB
-
MD5
5f1d5fa547ad2616f882e1b40ac40b33
-
SHA1
5e517dd1fc0329a05102fb2415ce3726b13baa6e
-
SHA256
1d8ba653bb7e932649251b3d1a39b1573c9dd407af79c2c44bca6a124fca7553
-
SHA512
de03753bc04166072ef6017a353a80276d9c28e033779f5ba20b2ab9524732ed66baed7688c827e157ba3c3268c46e21dccf0630e5a7a60a350728a5fb5e0d71
-
SSDEEP
6144:rC8K/1BwgyWdFzDm81XrIBPH1G59LdIvQMP+n8XisSXjsfYXxq3p1MMHPqKT1:rCNrJPP0PoHpY/mnB9Xj2YXYTMMHP/T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f1d5fa547ad2616f882e1b40ac40b33_JaffaCakes118
Files
-
5f1d5fa547ad2616f882e1b40ac40b33_JaffaCakes118.dll windows:4 windows x86 arch:x86
78a1af06bd543b4b3f07b625f5de67c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCanonicalizeA
kernel32
GetSystemInfo
HeapAlloc
HeapFree
GetProcessHeap
winmm
mmioOpenA
Exports
Exports
Sections
.code Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 388B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 356KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ