Static task
static1
Behavioral task
behavioral1
Sample
662a6bae7bf506afd7abe079b3c267c3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
662a6bae7bf506afd7abe079b3c267c3_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
662a6bae7bf506afd7abe079b3c267c3_JaffaCakes118
-
Size
24KB
-
MD5
662a6bae7bf506afd7abe079b3c267c3
-
SHA1
e71a3b6d8964e0bc65b2f25cd56bd0abc4152062
-
SHA256
f7da2f8a69ae7b39b808d9e6c6c7d22ef6e17d3661740d4d102d04bdc48d9963
-
SHA512
5702114fbe503e787a83015c55858695c4510dbf52035ab59dc5b7389537f7dfc6237f5f9657544315e942268e2ee88e4db304546c0840d665da23a8e44329ad
-
SSDEEP
96:FwT7XJuw6mf+wdGB3+RS3jsA4wJt2G7EO4J/7EO4NY/9ws06N+L+FAr:Fw/ZjRfxgslwiG7ENJ/7ENGFH8+FAr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662a6bae7bf506afd7abe079b3c267c3_JaffaCakes118
Files
-
662a6bae7bf506afd7abe079b3c267c3_JaffaCakes118.dll windows:4 windows x86 arch:x86
74df78eb6145ef61809c345cc01a1cb3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mfc42
ord4278
ord858
ord2818
ord939
ord860
ord537
ord2764
ord540
ord800
msvcrt
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
strstr
__CxxFrameHandler
kernel32
GetCurrentProcessId
CreateThread
CloseHandle
OpenProcess
GetModuleFileNameA
ReadProcessMemory
ReadFile
SetFilePointer
GetFileSize
CreateFileA
Sleep
user32
UnhookWindowsHookEx
DispatchMessageA
TranslateMessage
GetMessageA
SetWindowsHookExA
CallNextHookEx
ws2_32
recv
closesocket
send
connect
htons
socket
gethostbyname
WSAStartup
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SHARDAT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ