HookOpenGl
Static task
static1
Behavioral task
behavioral1
Sample
85f68abd6ebec8ff1c322bd71f365379_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
85f68abd6ebec8ff1c322bd71f365379_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
85f68abd6ebec8ff1c322bd71f365379_JaffaCakes118
-
Size
310KB
-
MD5
85f68abd6ebec8ff1c322bd71f365379
-
SHA1
63a8b111bba9810bd914ff0efc4f064a3abfcbd7
-
SHA256
5e954478d91886e4fd2844a4e3d9b76006f38d59fed2afae4fe1316e8b95ae94
-
SHA512
26da06bf17b435f330c7bfe33df3276e125c20d9bff00dd1353d7338c8b0c8e768a3467b1f76f5524b7d87ea7864f5cbb7a8b2bce36e92592eaeb4fba7e351d4
-
SSDEEP
6144:eYY1QJZqZXh3zmm04nDWgRAkPjtGQn8xID0DMFb0GIGQUlHuJ2sp6Pr1fvIKEdTS:XYmJZcXh9R3PRGLxe0DakwlOm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85f68abd6ebec8ff1c322bd71f365379_JaffaCakes118
Files
-
85f68abd6ebec8ff1c322bd71f365379_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Exports
Exports
Sections
gIHhRWWi Size: - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Hd2x2Cky Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
KEiSelIb Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DZLXOMb9 Size: 305B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9A4Ilpmy Size: 74B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HV45xpQA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DSxJedjp Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ