DllMoveFile
Static task
static1
Behavioral task
behavioral1
Sample
8bf706efd2652183e955524ee172fef3_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
8bf706efd2652183e955524ee172fef3_JaffaCakes118
-
Size
29KB
-
MD5
8bf706efd2652183e955524ee172fef3
-
SHA1
2f3a9e6fd9762e11e0cfdc6a6c4562e3701ad056
-
SHA256
b0c49af7c4e5528033753754a6f249619e370f51a268d97478a5ae6a525d1af7
-
SHA512
18e46180562b289397fede108ccb1f322dd8033cb7ec3c6d74773eb069be03b14e9a68118675593ed4abee0555d8accba86c62f32f610ea3517ace0038616fc4
-
SSDEEP
768:Zr97XzU+SOiM391pEcxkk5ZSM9VuReeENNsnvS:Zr9jQkLiKuRrENN6S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bf706efd2652183e955524ee172fef3_JaffaCakes118
Files
-
8bf706efd2652183e955524ee172fef3_JaffaCakes118.dll windows:4 windows x86 arch:x86
647b2d25b4821905b4195ff7a6455b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
Exports
Exports
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE