DllInit
Static task
static1
Behavioral task
behavioral1
Sample
8b3cd228258dca0cbf730c7ed6a6b303_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8b3cd228258dca0cbf730c7ed6a6b303_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8b3cd228258dca0cbf730c7ed6a6b303_JaffaCakes118
-
Size
654KB
-
MD5
8b3cd228258dca0cbf730c7ed6a6b303
-
SHA1
d23955653284c7f4459855df2097a4c96eca8954
-
SHA256
b65901f3d9ffa732db4e05e133c96d1bd7d5d15fbe219bbc89d48495e8070251
-
SHA512
63f017efb41b0bfeba5d4e6354496b2f65b3ab785e49fd59b6bb1a5335f51c59e69d54da1f06bc86b0d1f70a83178b80f63698707aa15690d98ebdce5e502340
-
SSDEEP
1536:ZFidf3QjUbaIGrF+Oyjti6o2wnIiyOc7wnYg8FmeBI9AfYYYggzMMgC83b2psar8:Ef3QRIGrMHjti6oIBI9g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b3cd228258dca0cbf730c7ed6a6b303_JaffaCakes118
Files
-
8b3cd228258dca0cbf730c7ed6a6b303_JaffaCakes118.dll windows:1 windows x86 arch:x86
03a133883022ef3364e10bdb7ce5e649
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetEnvironmentStrings
GetFileType
GetLastError
GetOEMCP
GetStdHandle
GetTickCount
GetVersion
LoadLibraryExA
LocalFree
LocalHandle
SetConsoleCtrlHandler
SetFilePointer
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
Exports
Exports
Sections
txt0 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
bss1 Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dat2 Size: 512B - Virtual size: 369B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rsrc3 Size: 619KB - Virtual size: 618KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
exp4 Size: 512B - Virtual size: 71B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dat5 Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dat6 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
imp7 Size: 1024B - Virtual size: 638B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dat8 Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.browse Size: 512B - Virtual size: 295B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.debug Size: 10KB - Virtual size: