Static task
static1
Behavioral task
behavioral1
Sample
a80e75bb41a9680ce6d1a5f65feecfbb_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
a80e75bb41a9680ce6d1a5f65feecfbb_JaffaCakes118
-
Size
128KB
-
MD5
a80e75bb41a9680ce6d1a5f65feecfbb
-
SHA1
95feab18622cc4984ec7c8db052845f689362a37
-
SHA256
7e06215ec6b2864ef050072b2d47533250a439e5e6778bacb65f8021baec647d
-
SHA512
074f08db9d3ccefb1d803afad70883cc7d8a436e29afeaeaee969db33ea74887a0ad95dba5f84082601ac2600c96a585cd4ad2ba0d3a3d9d7cc1ef71a5280ad8
-
SSDEEP
3072:bxOKgWpb2DzSqNiu2O7Qtp7bbmQCiVlykzqwjpRzIFGmHtZX8:tAoASbuj7ADb5zqwjnz3mN9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a80e75bb41a9680ce6d1a5f65feecfbb_JaffaCakes118
Files
-
a80e75bb41a9680ce6d1a5f65feecfbb_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE