Static task
static1
Behavioral task
behavioral1
Sample
8767b3dca08fe4b38b45d6e6127a184e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8767b3dca08fe4b38b45d6e6127a184e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8767b3dca08fe4b38b45d6e6127a184e_JaffaCakes118
-
Size
66KB
-
MD5
8767b3dca08fe4b38b45d6e6127a184e
-
SHA1
5c93ec59391209d4feff03973f3ae37ff3bdce4a
-
SHA256
a02097896bbb8be7a443c29e078a5894e552b4ee501347edb743b0cf31cbcd6e
-
SHA512
fa52991f9545833a4f457523062ea273b5ded92893cafd65cf7e930affc4f01560e7aeb49aca36bbf4560237484786be20ea5f81fece80faaea08a44c8b1390e
-
SSDEEP
1536:4R/msoYhT7o/TlZT1yqJc5P2lSua8mQNdzGrTEz/oB+Lx8y:+msbB7o/5519ePISmmQ3S0U0FN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8767b3dca08fe4b38b45d6e6127a184e_JaffaCakes118
Files
-
8767b3dca08fe4b38b45d6e6127a184e_JaffaCakes118.dll windows:4 windows x86 arch:x86
e1112b6722a3cce6443d7e0d778068c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExitThread
FindResourceA
SetCurrentDirectoryA
SetLastError
ExitProcess
msvcrt
__p__commode
__set_app_type
fprintf
swscanf
wcscat
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 786B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ