Static task
static1
Behavioral task
behavioral1
Sample
8232ced6deb60b7fe78c3f418321d6f7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8232ced6deb60b7fe78c3f418321d6f7_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
8232ced6deb60b7fe78c3f418321d6f7_JaffaCakes118
-
Size
144KB
-
MD5
8232ced6deb60b7fe78c3f418321d6f7
-
SHA1
ab6f3193dfdc70323007aca95eaa1b63eed36629
-
SHA256
82e7f4512d5d73a3cab1e07763dd7aec04811aa8fed2a58229a04169c15265d2
-
SHA512
4f44073c12ab885e379ad218ff0aec9648b0c00779ab40294076b655b721c0c5c4972a5de6aca51e1466b3033ffecbd5c57590dc22da8bcd7bdc8c2f1935451c
-
SSDEEP
3072:qYAoPMKesxbCOevfCfLJCKXz9JeGBPe3k19XqDqyd0+vGz/W:/rPZnxbCOFfLQqzJBUBDa+vG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8232ced6deb60b7fe78c3f418321d6f7_JaffaCakes118
Files
-
8232ced6deb60b7fe78c3f418321d6f7_JaffaCakes118.dll windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
16ykroap Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9unnih02 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
orjf34tm Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jazigog4 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5m6tprtk Size: 138KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jj329avy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ