Static task
static1
Behavioral task
behavioral1
Sample
af2bf62eff72c70dd83a3f23b129c371_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
af2bf62eff72c70dd83a3f23b129c371_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
af2bf62eff72c70dd83a3f23b129c371_JaffaCakes118
-
Size
40KB
-
MD5
af2bf62eff72c70dd83a3f23b129c371
-
SHA1
be437489fd364884100347d7fe01f230025d9562
-
SHA256
360e2b2fd3c919e6ee6ce12efd55f13f022f8197572cfa851c7552755566ca77
-
SHA512
87a812ad75158957e09c167817fd391efe4e337e2afeecf2bdca3a354bdcf79ac3ccbc39a184c97e3e9a627d27daba6692c9e28fbd742cd1389b2e5111eb5ce4
-
SSDEEP
768:3Q5sN5oNJYFxsCLwh8g+CCuvq60rGMSrsvf3qflRInq0bELbOBZJ13EK3F:3mvWPZ+4vfadRInwLCbr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af2bf62eff72c70dd83a3f23b129c371_JaffaCakes118
Files
-
af2bf62eff72c70dd83a3f23b129c371_JaffaCakes118.dll windows:4 windows x86 arch:x86
aa1ca832e28e2c6a63685365c58b52b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadModule
user32
MessageBoxA
Sections
ouket3f1 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f066ad16 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxukm890 Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9dsuhqha Size: 142B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
4kjfunb2 Size: 696B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ