CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
7619538fafbea49993476c73aebb340a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7619538fafbea49993476c73aebb340a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
7619538fafbea49993476c73aebb340a_JaffaCakes118
-
Size
174KB
-
MD5
7619538fafbea49993476c73aebb340a
-
SHA1
52e528073d4b33ce2f4738171e435dba5efc001c
-
SHA256
c8c34905a614494a4e2805cf7433f4e4c60730d83b9c0ba5696b8ac1e36af553
-
SHA512
f5e29a9295f4ec53ed952b55fed4b2ce63a04dc91433ed8c338215ae1c6cb826382416016e4f48112bba56f864907c7c25b0732e6f6518d72e0b5f94929e5ada
-
SSDEEP
3072:X2FvntDrOCD+pcur2E8BQP/elrupk99IO6yQMbXmOoP5dK70qE0RNSGBxNzBt3nh:X2RtDYcurfelGNO6KbXYA0qEqSAxNzBf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7619538fafbea49993476c73aebb340a_JaffaCakes118
Files
-
7619538fafbea49993476c73aebb340a_JaffaCakes118.dll windows:4 windows x86 arch:x86
aa1ca832e28e2c6a63685365c58b52b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadModule
user32
MessageBoxA
Exports
Exports
Sections
.text Size: - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 142B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ