input
Static task
static1
Behavioral task
behavioral1
Sample
a2ee7c3184201ede72dc5a2688906b72_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a2ee7c3184201ede72dc5a2688906b72_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a2ee7c3184201ede72dc5a2688906b72_JaffaCakes118
-
Size
41KB
-
MD5
a2ee7c3184201ede72dc5a2688906b72
-
SHA1
137e53ae94c0895d68a49242850491956ace867c
-
SHA256
b1ce6c50f58b01f63bd6e1c06ce0aad02b6ec72fa27404b3e72f0b1c0a59826f
-
SHA512
b04a655da812739dbf8388e73971019772d725acc88a1210d37ab12f0830cfc132580d43594624273b4ffe91918a8d997b29156b4e167c194d960190b0826281
-
SSDEEP
768:A8cTBusYmah1WgSvo+NeakZVF5psssMswO+T1ydSJAAW:A8wusSh1jSsbfsVJR+TMAJAA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2ee7c3184201ede72dc5a2688906b72_JaffaCakes118
Files
-
a2ee7c3184201ede72dc5a2688906b72_JaffaCakes118.dll windows:4 windows x86 arch:x86
5544a558178895c012502baa823128b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
connect
advapi32
SetSecurityDescriptorDacl
Exports
Exports
Sections
.text Size: 35KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE