win1
Static task
static1
Behavioral task
behavioral1
Sample
66a6c556042e662f5334cbad91d83461_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
66a6c556042e662f5334cbad91d83461_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
66a6c556042e662f5334cbad91d83461_JaffaCakes118
-
Size
2KB
-
MD5
66a6c556042e662f5334cbad91d83461
-
SHA1
bf33cfb3dc104a27cb548c16cfcdff949f5ff640
-
SHA256
33e893def3e529d99c2e68e4292f6cd9095d128ee91d24957e305a73c64bb564
-
SHA512
7a7f26826debc5751ac23121c805d163c60317af54cac2fb23d04b9dcc254559ca3f07b59d5a7477a343039d63d1d591fd8db863be50257286a55678b316f9a7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66a6c556042e662f5334cbad91d83461_JaffaCakes118
Files
-
66a6c556042e662f5334cbad91d83461_JaffaCakes118.dll windows:4 windows x86 arch:x86
877ddd01609b6013d145a39b15a78d8a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WinExec
Sleep
CreateThread
GetLastError
CreateMutexA
GetVersionExA
GetSystemDirectoryA
GetModuleFileNameA
GetModuleHandleA
GetCurrentProcessId
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 783B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ