rand
Static task
static1
Behavioral task
behavioral1
Sample
967fc2f002b609bb434e3228ec186e5c_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
967fc2f002b609bb434e3228ec186e5c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
967fc2f002b609bb434e3228ec186e5c_JaffaCakes118
-
Size
10KB
-
MD5
967fc2f002b609bb434e3228ec186e5c
-
SHA1
8fa48b192d2a0b882c319536dae539897a6f3b55
-
SHA256
2a62a6cb5eb1ad74b7586860f9656f4c717adc9ed14d850e17e02cd43cb104ba
-
SHA512
7b15d55c7c921bb5816abfe583a83e754126bae8ec6a9ee41c03acfc0e3b98a28c2d425961e9ff6df81ffb02a6feeb6d1d93bc5f079257578cff48a435bc3251
-
SSDEEP
96:Z1gemCu+lW6XRDG5gewkGgISbNUTPcvDIgZFDQQsAPW9NkSl:EeJlLXRDG2ZkGgISbNAPcMEyaWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 967fc2f002b609bb434e3228ec186e5c_JaffaCakes118
Files
-
967fc2f002b609bb434e3228ec186e5c_JaffaCakes118.dll windows:1 windows x86 arch:x86
b598b927a6146b1ef8b218042fa6fa27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
ExitThread
ExpandEnvironmentStringsA
GetFileTime
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetFileTime
Sleep
user32
MessageBoxA
wsprintfA
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE