send_request
Static task
static1
Behavioral task
behavioral1
Sample
89afc79b9fee610c2ae18e6494775018_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89afc79b9fee610c2ae18e6494775018_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
89afc79b9fee610c2ae18e6494775018_JaffaCakes118
-
Size
10KB
-
MD5
89afc79b9fee610c2ae18e6494775018
-
SHA1
712d3632ec792f36178f5f83db8029fde430bd84
-
SHA256
ad662ec0cd9e7a4d93c3fbd5fa95d1e3be15f66f8800f82b76c3c44a12c2f2ea
-
SHA512
9aca32dfd32c2cc04b191e7dd974cbe0dee30e68bbac8be477c32ea354789bb2602894ea5349b28fae3716f50dde46ef8bb13a6cc3f572f845d38d30cc06306f
-
SSDEEP
192:NDDbyO+Grhz1XdRHvrw3hwot3PykRggaNv5S70cVfSDoHQxDxVEA8dkru1BFlJSK:9H+cQMgKK4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89afc79b9fee610c2ae18e6494775018_JaffaCakes118
Files
-
89afc79b9fee610c2ae18e6494775018_JaffaCakes118.dll windows:4 windows x86 arch:x86
d9897786bb81b8660a6c9c9bfa5a0132
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsDebuggerPresent
Sleep
CloseHandle
CopyFileA
CreateFileA
CreateThread
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
MoveFileA
ReadFile
VirtualAlloc
WriteFile
lstrcmpA
lstrcpyA
lstrlenA
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 810B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ