soxmfuo
Static task
static1
Behavioral task
behavioral1
Sample
b14ff1c5c0162710a802bb9a424eebf8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b14ff1c5c0162710a802bb9a424eebf8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b14ff1c5c0162710a802bb9a424eebf8_JaffaCakes118
-
Size
100KB
-
MD5
b14ff1c5c0162710a802bb9a424eebf8
-
SHA1
d6f61dd4eb3efd42a04ac3c68f39e8a22663a074
-
SHA256
b3bf1dbde7a8714bf04dd179ca36239df65f22b0eade56d2281f44a5c787e6c8
-
SHA512
9cc512cbb609fb75b3ed26f333f3641835070cbc27b13101e81d381c2b72a509a48ad2386d1a9b3d64c064b57de3886b4f1b4a28f0f97f71b1788ccf2866260a
-
SSDEEP
3072:V74bvusDfr1NtKp2XaEjKfwdkWGqzjTA:V74bvuwfDtKptMKf21Gqz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b14ff1c5c0162710a802bb9a424eebf8_JaffaCakes118
Files
-
b14ff1c5c0162710a802bb9a424eebf8_JaffaCakes118.dll windows:4 windows x86 arch:x86
f1015a99bc20a3562729eb637c0602ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapValidate
HeapCompact
CreateTapePartition
GetTimeZoneInformation
GetDevicePowerState
EnumCalendarInfoExA
HeapFree
GetProcessHeap
HeapAlloc
ExitThread
Beep
ExitProcess
gdi32
MoveToEx
SetROP2
GetLayout
SetLayout
GetDeviceCaps
DeleteObject
LineTo
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetDIBitsToDevice
DeleteDC
GetStockObject
Exports
Exports
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1011B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 450B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ