Static task
static1
Behavioral task
behavioral1
Sample
8ba9311dd06f6f9e88110e4b18a8206c_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
8ba9311dd06f6f9e88110e4b18a8206c_JaffaCakes118
-
Size
324KB
-
MD5
8ba9311dd06f6f9e88110e4b18a8206c
-
SHA1
b4ec3851352653b4a73536ce5b1f810427266cb4
-
SHA256
982a3c6dda59afa109d2f596ad59ba1330d0c45aa7b6068e7c5c5e15d8fca878
-
SHA512
281ae456ef257d789974aa07ec1f499fee5039dfc547663e415b1e67ef601e6f6ef3cf540a522508db18d6118830e1b7424473e16ee4b34b35bf99d832725a5c
-
SSDEEP
6144:Oc5623NRws381V0GYCPTIZLZXWT0BqPohGNF/nWbyLOt:Oce1V0rC8ZLZXWT0YAGObaC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 8ba9311dd06f6f9e88110e4b18a8206c_JaffaCakes118
Files
-
8ba9311dd06f6f9e88110e4b18a8206c_JaffaCakes118.dll windows:5 windows x86 arch:x86
29d4fcfe187ed520fb86f07eb849fc16
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
rasapi32
RasEnumAutodialAddressesW
user32
GetFocus
kernel32
GetModuleHandleW
GetModuleHandleA
oleaut32
GetRecordInfoFromGuids
advapi32
RegCloseKey
Sections
.rdata0 Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Rdata Size: 4KB - Virtual size: 922B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt2 Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ