Static task
static1
Behavioral task
behavioral1
Sample
b4538b64863b69ff8f095d1f45815c9a_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
b4538b64863b69ff8f095d1f45815c9a_JaffaCakes118
-
Size
659KB
-
MD5
b4538b64863b69ff8f095d1f45815c9a
-
SHA1
827a0d82696db09c176e73b15c8c1e43d42fd740
-
SHA256
575a1ef4892e07ff273bd3b9dbe44abb5630bccdfb2f0a60ff930f7c6dd2dc23
-
SHA512
d69253b66d8e45c17ace9618726d5c6d0649ff9bd2dcd47413474bcdfaf33e65bc47706d9a0659d0f20c437c6ce714d6bc564ce4e03daa54582cbbf5ac10c4fd
-
SSDEEP
12288:t2CdJverND4Od3sYTg58Nsj2UOBPqqHWG2hBiZG4kFmcD+ZeOax1SB:tV1iky3zTa8NwpOwq2G2hokkcDROaPu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4538b64863b69ff8f095d1f45815c9a_JaffaCakes118
Files
-
b4538b64863b69ff8f095d1f45815c9a_JaffaCakes118.dll windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zwzqlapx Size: 642KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hlevzkgs Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE