Static task
static1
Behavioral task
behavioral1
Sample
a262fe2ed4376d009c769fe8fd18610b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a262fe2ed4376d009c769fe8fd18610b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a262fe2ed4376d009c769fe8fd18610b_JaffaCakes118
-
Size
45KB
-
MD5
a262fe2ed4376d009c769fe8fd18610b
-
SHA1
f78a83fcf28e5c6b55aa4adf8f78b0fb99917bea
-
SHA256
eeb68010c2523395d03ea46dd15c6e836c414d2f1a5402ebd001f1ba48f4078c
-
SHA512
5f2926872f4cdfe0560530fadc259675352f8f45d90f0c5d15438f75ba396c6f95d6a6c4ea79a661d200b6fb4b65a7d1452635e66cc2686f1361f2f198f8f748
-
SSDEEP
768:wdMv1QhoNBLw30cWXMU1SpP1SjQ/V4D1fRQfR6xagDYl5gxxUgy3ZuSi3bZ:aMdQhoNA06U1SB/6fRQ8aCprUgmDi3N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a262fe2ed4376d009c769fe8fd18610b_JaffaCakes118
Files
-
a262fe2ed4376d009c769fe8fd18610b_JaffaCakes118.dll windows:1 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
teq314dn Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8qwlqs1v Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crimn0wy Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ia364n7w Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ