input
Static task
static1
Behavioral task
behavioral1
Sample
863d4edebb3299ab76541cc26ee8b42a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
863d4edebb3299ab76541cc26ee8b42a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
863d4edebb3299ab76541cc26ee8b42a_JaffaCakes118
-
Size
21KB
-
MD5
863d4edebb3299ab76541cc26ee8b42a
-
SHA1
14de006db7a93074e8b2001ef564b96b1b789034
-
SHA256
dfeb628361efdcdf810084f078dc2bfae790f7d5d0dab2a6da6bffd954a429d4
-
SHA512
7db19bf7d7f586beeaa128182a209b321ff6b3fd470f7a71f8924c5a0be3b64c8692769ec51be67df04c6556f0d56409f644f263a5b2fc0b306f73900f57399c
-
SSDEEP
384:kWB69+XHJs5amVG132Izr4zbYgV/hLl2Yr+tAIl6FBa7XQ1N/StjVE:kj9t44ozr43Y0hLrWNl6FA8e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 863d4edebb3299ab76541cc26ee8b42a_JaffaCakes118
Files
-
863d4edebb3299ab76541cc26ee8b42a_JaffaCakes118.dll windows:4 windows x86 arch:x86
7a4eaabedeef78fea9d07005173c674b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
wsprintfA
msvcrt
strncmp
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE