Start
Static task
static1
Behavioral task
behavioral1
Sample
667094e7dcdc49cae6b8f1418c6aad92_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
667094e7dcdc49cae6b8f1418c6aad92_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
667094e7dcdc49cae6b8f1418c6aad92_JaffaCakes118
-
Size
5KB
-
MD5
667094e7dcdc49cae6b8f1418c6aad92
-
SHA1
125f3b47abdb952c31f90c9d35af4217a3b88e6c
-
SHA256
e7ae3cbacf17ee27342ddd2b1ca5312a0594819b79799fde3cdb7f582abc6060
-
SHA512
f15d0216d9d15d7b67ce3e02e928f85efa70678415fb5f1730ca8aed7024016820035506f25716670304aa5bbd0c8cd9f9af7f3f3389010820032045648b5810
-
SSDEEP
96:AtSRKPTbpqySyljS2kUqJNuv136lVP8a5jEAp:ssySsSc13+V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 667094e7dcdc49cae6b8f1418c6aad92_JaffaCakes118
Files
-
667094e7dcdc49cae6b8f1418c6aad92_JaffaCakes118.dll windows:4 windows x86 arch:x86
41a3b771b813730927179553ab4e9d73
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
Sleep
WinExec
GetCommandLineA
GetSystemTime
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
urlmon
URLDownloadToFileA
wininet
DeleteUrlCacheEntry
mfc42
ord5442
ord354
ord5186
ord665
ord1979
ord6385
ord6010
msvcrt
strcpy
strcat
memset
strlen
rand
srand
__CxxFrameHandler
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ