Static task
static1
Behavioral task
behavioral1
Sample
8828e2fe7eb177daa91ef605813b3af6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8828e2fe7eb177daa91ef605813b3af6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8828e2fe7eb177daa91ef605813b3af6_JaffaCakes118
-
Size
14KB
-
MD5
8828e2fe7eb177daa91ef605813b3af6
-
SHA1
068a914abd29d659b951cf849a2c926497fff07c
-
SHA256
4d4adb82da6dbe23ffb16641ee0cda726efda695e00fe2b734a272ea33988646
-
SHA512
046c2d960fa89bd0a4f775434de0ad522c69ac70046420e3bd4e105dbc30259400234d7234f8e6b87bf9e80d15f1f4c80896eb7689214818aeed643c3dabd932
-
SSDEEP
384:Vt47ExdC1sj/tPFokP4YOEmLq7uMcjgkGlG:is4ePFmYZl7urgkGlG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8828e2fe7eb177daa91ef605813b3af6_JaffaCakes118
Files
-
8828e2fe7eb177daa91ef605813b3af6_JaffaCakes118.dll windows:5 windows x86 arch:x86
88776ec49c9309ff71ecb75476a3179c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetRect
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateFontA
msvcr90
malloc
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE