input
Static task
static1
Behavioral task
behavioral1
Sample
a3fc2c2db279bc97c82f36046bf2fb7f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a3fc2c2db279bc97c82f36046bf2fb7f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a3fc2c2db279bc97c82f36046bf2fb7f_JaffaCakes118
-
Size
18KB
-
MD5
a3fc2c2db279bc97c82f36046bf2fb7f
-
SHA1
47fb2a49c1959233a24ad8b37e0c3a754b30341e
-
SHA256
a9f044a2369c1d5c416f95b1e423415ec0c42893428400366e9ad34281d67ea0
-
SHA512
7083d6c41fb102abe5c9f7198632e702f61120eb43b60190d6c05c9a61fb746c8069c13b2654da71bea0f49f07c624d5a8e6f1b47bff6b863b99928b93b883dc
-
SSDEEP
384:xnP3n0cvegc+0pxioAsJOHGdbxXMbmE8ZGE50UUDrB+0:ZPXvUFQtydbxcaCE50UUDF+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3fc2c2db279bc97c82f36046bf2fb7f_JaffaCakes118
Files
-
a3fc2c2db279bc97c82f36046bf2fb7f_JaffaCakes118.dll windows:4 windows x86 arch:x86
eb378e473db29836c21de55079eea784
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
strlen
Exports
Exports
Sections
.text Size: 14KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE