DllMain
Static task
static1
Behavioral task
behavioral1
Sample
8999f4968d1e9cc6941035c68439962d_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8999f4968d1e9cc6941035c68439962d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8999f4968d1e9cc6941035c68439962d_JaffaCakes118
-
Size
9KB
-
MD5
8999f4968d1e9cc6941035c68439962d
-
SHA1
794e61abc131db566229d18b56e7d13404b2845c
-
SHA256
6040551e5db8a2cf2926b93bf9e744ddc94ac0f65993d6e1c93f0e9ead7ecad7
-
SHA512
bca943f0a4b1830fc56693e8364b7f75a2ba67603c29c71ed31568b9278a7c88e0fe7a8de9d07adf0681a70de22c00c23b50937cdbdaf97df50c333346b26db6
-
SSDEEP
96:+SGOEeqO4On81/EZtktB/Nh49/UTcbf9Mx6+9i+3w8yOluBFRBob2voSImb/8I0w:V2y8ectBlhkXbFkQ+XybyWJhPp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8999f4968d1e9cc6941035c68439962d_JaffaCakes118
Files
-
8999f4968d1e9cc6941035c68439962d_JaffaCakes118.dll windows:4 windows x86 arch:x86
3f2afadbf5125d8f022bba54a0ddce61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
sprintf
shlwapi
SHSetValueA
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE