Static task
static1
Behavioral task
behavioral1
Sample
a78936ff67dede0e58fa82b8794d23ba_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
a78936ff67dede0e58fa82b8794d23ba_JaffaCakes118
-
Size
44KB
-
MD5
a78936ff67dede0e58fa82b8794d23ba
-
SHA1
0d7541ca319ada3400063018144893c68a9a5011
-
SHA256
4412ed9cca443cc28aa078a72265cdeb5f79118d4e74e9d1d6eff20dfdadb5b6
-
SHA512
0ec3353aae4fb6bc866f21f1567878df555726f3b3f73be4c31ed4db253ccf0e802e58f7f056be34800baeab5272ce91d9b3881ac736703d3147f90fd95591c5
-
SSDEEP
768:IyB2n2uRFq9lgBhjwBggfzniR/4zwFD+W3TChKVAZFYo5CWS:IyB02ura4CKgfznil4Uoy8KVAZFYo52
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a78936ff67dede0e58fa82b8794d23ba_JaffaCakes118
Files
-
a78936ff67dede0e58fa82b8794d23ba_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 42KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE