Static task
static1
Behavioral task
behavioral1
Sample
a99293911d6506b5c9fdd3fb5118617e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a99293911d6506b5c9fdd3fb5118617e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a99293911d6506b5c9fdd3fb5118617e_JaffaCakes118
-
Size
252KB
-
MD5
a99293911d6506b5c9fdd3fb5118617e
-
SHA1
b30cd420c3d79995664d150b72bef720fca0cd77
-
SHA256
100bd89b5d9c35f1d868832dae24268f87ef67dbdb7b29ec9eb736650a2741f2
-
SHA512
8e333cab38a713ef14fff9ec10b281527ba5250a4a50d98727186780e7658b21a2a3d7ee6d1e4c36e3f7111a18d7638cd27a3a5ad1ed09b52937e5441ca73479
-
SSDEEP
6144:D/LQzs0f08wrTKMluVDpQ2wnnoXaH94+XkZloT/Oz:LLQ40fI/KMcVD8nZ4ekZloSz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a99293911d6506b5c9fdd3fb5118617e_JaffaCakes118
Files
-
a99293911d6506b5c9fdd3fb5118617e_JaffaCakes118.dll windows:4 windows x86 arch:x86
4e983cfec976e3b8abae537649c90444
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryExA
lstrlenA
ResetEvent
GetOEMCP
ReadFile
SetEvent
ExitProcess
SetErrorMode
GetCommandLineW
GetACP
SetEndOfFile
GetModuleHandleW
GetProcAddress
GetLastError
IsBadReadPtr
GetModuleHandleA
VirtualAlloc
SetFilePointer
ExitThread
SetHandleCount
Sections
.text Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 855B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 253B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 4KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 4KB - Virtual size: 926B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ