Static task
static1
Behavioral task
behavioral1
Sample
83873df7d7bf59f4e55cec0555bd032a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83873df7d7bf59f4e55cec0555bd032a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
83873df7d7bf59f4e55cec0555bd032a_JaffaCakes118
-
Size
30KB
-
MD5
83873df7d7bf59f4e55cec0555bd032a
-
SHA1
df57da56bb7efdd3e59266f5360fee501d424642
-
SHA256
008284ae6b61297192c4513ebba797b0358e30687740e5bc3b39fa81801bace0
-
SHA512
322115260303e570fcaacf3c4fccb0fb500b44e1eaf65523763386ab4e03da3644f11956cfdc898dc9e9ba466a3c87be477d3f7836aae29a69d24f70ccd634f0
-
SSDEEP
192:/+N+uTn6il4diOk0LeXxPANG4Ypr4sET9bRjJrYgxzLduB7sHn84c:/+N+tUWqYG4YpvEhtjJrYgxHUB73
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83873df7d7bf59f4e55cec0555bd032a_JaffaCakes118
Files
-
83873df7d7bf59f4e55cec0555bd032a_JaffaCakes118.dll windows:4 windows x86 arch:x86
1df0de6e7c04336218c5d9de6fb34d44
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar
user32
CharNextW
EnableMenuItem
LoadStringW
UpdateWindow
Sections
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ