f
Static task
static1
Behavioral task
behavioral1
Sample
948a195a56aa94fdad978ae0d1626858_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
948a195a56aa94fdad978ae0d1626858_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
948a195a56aa94fdad978ae0d1626858_JaffaCakes118
-
Size
4KB
-
MD5
948a195a56aa94fdad978ae0d1626858
-
SHA1
0c6369490deaf843f124de99b0b249fe970dec94
-
SHA256
40452820de64fe3f4aad3398ce051d033084945190fb8d674021d1f4051cb8ab
-
SHA512
71cf70d1eb17c9db5e4e646e1d39e31f25e12795f2455be3ff7cbe7b0d435d2ce847c3b1a9ffef95e1a60cc17acc302d034549c27f1bda4a26f2e42f35eadb21
-
SSDEEP
48:iJmykKP7dFcXBzbonRQJh5qmit1ONKjLIK14LSmmfZtokc0XyKA+SJHNl:6znQB4nqqr1O08mmnuhJSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 948a195a56aa94fdad978ae0d1626858_JaffaCakes118
Files
-
948a195a56aa94fdad978ae0d1626858_JaffaCakes118.dll windows:4 windows x86 arch:x86
325138a7a6afaa775322d76029e01058
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetTickCount
HeapFree
HeapAlloc
CloseHandle
WriteFile
CreateFileA
FindClose
FindNextFileA
FindFirstFileA
lstrcatA
GetVersion
lstrlenA
lstrcpyA
GetWindowsDirectoryA
WinExec
ReadFile
SetFilePointer
GetModuleFileNameA
CreateThread
GetProcessHeap
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
Exports
Exports
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 799B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ