Static task
static1
Behavioral task
behavioral1
Sample
a582114c26119879954621a0095bd0b6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a582114c26119879954621a0095bd0b6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a582114c26119879954621a0095bd0b6_JaffaCakes118
-
Size
17KB
-
MD5
a582114c26119879954621a0095bd0b6
-
SHA1
880acf375bbdcbe5b6fa25071e7f3ad43fa66cc7
-
SHA256
f21a2b646a794520fd2a4a4a905d4066e8f95cffbac962bfdce48d3c7db5c122
-
SHA512
9e65dbaaec8fb91d2ba72a62ea4721397eb46b100395b94ee8f01de84f2c2bb7bebd63328c1ea8c681f7bf5c6884905400405f0399d350f003174b019ee3213e
-
SSDEEP
384:dJRJwnu6eiUnMZHmtkFIZaMlwbrWnp1ixSnvO0LHznWY:din8XnttxZjle6np1iEG0nh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a582114c26119879954621a0095bd0b6_JaffaCakes118
Files
-
a582114c26119879954621a0095bd0b6_JaffaCakes118.dll windows:5 windows x86 arch:x86
5be9db47c0dca7c45a5907e932108dd2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
keybd_event
d3d9
Direct3DCreate9
d3dx9_43
D3DXVec3Project
msvcr100
??_U@YAPAXI@Z
Sections
.text Size: 12KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE