LoadBitmapA
Static task
static1
Behavioral task
behavioral1
Sample
a32333fe39e59545b1a201ed2189916a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a32333fe39e59545b1a201ed2189916a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a32333fe39e59545b1a201ed2189916a_JaffaCakes118
-
Size
11KB
-
MD5
a32333fe39e59545b1a201ed2189916a
-
SHA1
98a75d0694d267bd7333b6a1df4b5939bd9e146b
-
SHA256
a62f96dc593a42928b3d693a894b93a088e7b923b8705a3a7878130bd70b18fe
-
SHA512
e19fa1ae79aa0f7b1012e3800102a536e8aeb8b3d8d0145db481b7926af52c2ddeb189352b8d915bfe93f020bd3661951c21b8cf8ae68a69e4ea3937e1385eb4
-
SSDEEP
192:hsOdvxcriVx4qKOgyP+Iv/APNxO+SQjiOdoJu2k5:Fkri/HPTP+IvKNEvQjiO5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a32333fe39e59545b1a201ed2189916a_JaffaCakes118
Files
-
a32333fe39e59545b1a201ed2189916a_JaffaCakes118.dll windows:4 windows x86 arch:x86
091ac15ca47e0abe62045038821dfa5a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
GetEnvironmentVariableA
GetFileSize
GetProcAddress
LoadLibraryA
MoveFileA
ReadFile
Sleep
VirtualAlloc
WriteFile
lstrcatA
lstrcpyA
lstrlenA
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 462B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ