smooth_rect
Static task
static1
Behavioral task
behavioral1
Sample
6881367a3f85d3556a6b6d0d2d746b74_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6881367a3f85d3556a6b6d0d2d746b74_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6881367a3f85d3556a6b6d0d2d746b74_JaffaCakes118
-
Size
10KB
-
MD5
6881367a3f85d3556a6b6d0d2d746b74
-
SHA1
e4b098747485feffd1b3d665669f84d97edf4eef
-
SHA256
72e2ce33e095452b1146d26a654bf41eb01cd9b91c5f85fc8c03440b65c7f906
-
SHA512
b0f208f6116005d5cca36c0ce4fe7b054f10f96052c65ed87fbdd9f9e61b68b76535aeeebdb688cc7ffdcf564971b6af1d8c6bfe5b7d7f0a09dac6597fc5420b
-
SSDEEP
96:NDDbBFx2sp7zN4shLnG010i4Rjp35/6eVewakNci+oelK3Q/5/FAWNc3SGp8diXt:NDDFFf9zhR26tEcCFC6ae4G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6881367a3f85d3556a6b6d0d2d746b74_JaffaCakes118
Files
-
6881367a3f85d3556a6b6d0d2d746b74_JaffaCakes118.dll windows:4 windows x86 arch:x86
d9897786bb81b8660a6c9c9bfa5a0132
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsDebuggerPresent
Sleep
CloseHandle
CopyFileA
CreateFileA
CreateThread
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
MoveFileA
ReadFile
VirtualAlloc
WriteFile
lstrcmpA
lstrcpyA
lstrlenA
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 583B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 810B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ