Static task
static1
Behavioral task
behavioral1
Sample
5f7fcdc4c1b1f167a5957e7e8956c047_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
5f7fcdc4c1b1f167a5957e7e8956c047_JaffaCakes118
-
Size
120KB
-
MD5
5f7fcdc4c1b1f167a5957e7e8956c047
-
SHA1
0e963bc7a57f4d2e2b0602f52aea92d7bf273e29
-
SHA256
e62e1392746a266c29362d027e1015781e3f662a412b6f6a99eebf3aa81bb93d
-
SHA512
eeafde6cf671c1ef85c0065bb03a5c6bfb81b13300390a4e4af4356fbefc14c484288c54438ff3c1ab7b30cad8189e928520d9cf9f4a097d719104a76a073d43
-
SSDEEP
3072:Wadmt//fUgKK1k9odhqyrSHEWaJ0xB39dGE1X:pi/HUCkIhPrSHEvJ0xB39dJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f7fcdc4c1b1f167a5957e7e8956c047_JaffaCakes118
Files
-
5f7fcdc4c1b1f167a5957e7e8956c047_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ