vyaokku
Static task
static1
Behavioral task
behavioral1
Sample
962cb8d8c3bb9a953d602ee36c78eab9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
962cb8d8c3bb9a953d602ee36c78eab9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
962cb8d8c3bb9a953d602ee36c78eab9_JaffaCakes118
-
Size
104KB
-
MD5
962cb8d8c3bb9a953d602ee36c78eab9
-
SHA1
367fab1ca123f4293d07e851838f77eb62e6ad3a
-
SHA256
e4961349e1a2ebaa02e8bfeaefaec42172e616403c244cc86b3c174b30f56b77
-
SHA512
ea9353e2d07d0a9fab0805c650fd575e5048c7fcffd65dc009169fdbe275ab035cea8935593a7069d49b33024680d32f3b3a032340968193fe2d9621b034f72c
-
SSDEEP
3072:paBdaMKcfxQ4pTjkTRxI8NLJRgdkWGqzjTA:KdXfxhTIrI8N181Gqz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 962cb8d8c3bb9a953d602ee36c78eab9_JaffaCakes118
Files
-
962cb8d8c3bb9a953d602ee36c78eab9_JaffaCakes118.dll windows:4 windows x86 arch:x86
f1015a99bc20a3562729eb637c0602ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapValidate
HeapCompact
CreateTapePartition
GetTimeZoneInformation
GetDevicePowerState
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess
gdi32
MoveToEx
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
DeleteDC
GetStockObject
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ