Static task
static1
Behavioral task
behavioral1
Sample
70c1512870dd6a3926bc9a1798b21e18_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70c1512870dd6a3926bc9a1798b21e18_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
70c1512870dd6a3926bc9a1798b21e18_JaffaCakes118
-
Size
25KB
-
MD5
70c1512870dd6a3926bc9a1798b21e18
-
SHA1
6ad48580fe0c8e36ade90dc0801abe4e2e28fc82
-
SHA256
1fa7248fd4d15351022106319147820447885148618f6773eb6561a50cfbfcd5
-
SHA512
fa8f184da65c7fee998c74ef0692154ae83b6824b0b51547147b3808b71d5a69915ab30e0ca9f178151d32e3d2c5f362121533c967193771a2e31d168e20c350
-
SSDEEP
384:i/nnbILPuEgrBbaeTRKqCX5ETqKfnPTqUkE1WAvvGVG3YZhxZ9Kk:UbwGEC1TR65oqsuMpmAYZhJN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70c1512870dd6a3926bc9a1798b21e18_JaffaCakes118
Files
-
70c1512870dd6a3926bc9a1798b21e18_JaffaCakes118.dll windows:4 windows x86 arch:x86
5273cee449b07c31140e652d7900f9c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetLocaleInfoA
GetFileAttributesA
GetLocalTime
GetComputerNameExA
GetConsoleInputWaitHandle
GetQueuedCompletionStatus
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ