_LibMain@12
Static task
static1
Behavioral task
behavioral1
Sample
8220a7bd36456340b55e241914eb646a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8220a7bd36456340b55e241914eb646a_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
8220a7bd36456340b55e241914eb646a_JaffaCakes118
-
Size
6KB
-
MD5
8220a7bd36456340b55e241914eb646a
-
SHA1
bf8ab03eb02813c4a754bd1cfeb5147002979237
-
SHA256
4f9490966336728741962452f0f3b2f0de6213cbeaa9c59c2cfc4074bc32ff94
-
SHA512
053a5a7b9245649a8137301cbbfba6a9a6e99e658c75be83472e361cb7dcb515d01dbcb1186d4014f55daee2266c564e13ae4fe4ace748e95a8d7fa9d5d7758d
-
SSDEEP
48:654niyJfpYVOw2VxwT1CeV5sgHEJdT39ST4BLpFH9c9Jk/ayZSQo:Fw2V2TXVCgS7ST4dpFHiXqa9Qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8220a7bd36456340b55e241914eb646a_JaffaCakes118
Files
-
8220a7bd36456340b55e241914eb646a_JaffaCakes118.dll windows:1 windows x86 arch:x86
fb054989c09c78f5da19a9e820a3f02e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitProcess
GetCurrentThreadId
GetEnvironmentStringsA
GetLastError
GetModuleFileNameA
CloseHandle
GetSystemDirectoryA
GetTickCount
GlobalAddAtomA
IsDebuggerPresent
OpenMutexA
RtlUnwind
WinExec
crtdll
_fdopen
_open_osfhandle
_sleep
fclose
_cexit
malloc
memcpy
printf
raise
setbuf
srand
strcat
strcpy
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 84B - Virtual size: 84B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 224B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 880B - Virtual size: 880B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 224B - Virtual size: 224B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
.edata Size: 72B - Virtual size: 72B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ