getSpot
Static task
static1
Behavioral task
behavioral1
Sample
a44087d39fdf4028b6fc0361663b6500_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a44087d39fdf4028b6fc0361663b6500_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a44087d39fdf4028b6fc0361663b6500_JaffaCakes118
-
Size
11KB
-
MD5
a44087d39fdf4028b6fc0361663b6500
-
SHA1
c0552db0afbbafcafc5fce87d717d8adf01d1abb
-
SHA256
cc754d566dd99fdb4c3e834d59e715cda5ae3a0cec689444f6b7815f87b47c33
-
SHA512
fc46791d93ab6586db2a5a69cdf786849d7c92bb9d20024b5ca49d250842e98a5be62451d0365d2686e208230898dc4656727b28dcbe3083e595796af1f5ae85
-
SSDEEP
192:Ej9CEZDEiLrVT9SwuvgU9Gt0hTcfMdgW6VW2Jr1im90wGUrlCA6YyvqmHLI:Ej9jZl6aJNkmW6VWsMm90PUrl9psqmr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a44087d39fdf4028b6fc0361663b6500_JaffaCakes118
Files
-
a44087d39fdf4028b6fc0361663b6500_JaffaCakes118.dll windows:5 windows x86 arch:x86
9e6f42c96ba23b37638951e606eb2d21
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
UnhookWindowsHookEx
ntdll
RtlFreeAnsiString
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE