input
Static task
static1
Behavioral task
behavioral1
Sample
b79252894809f5cf83e7139466256983_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b79252894809f5cf83e7139466256983_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b79252894809f5cf83e7139466256983_JaffaCakes118
-
Size
18KB
-
MD5
b79252894809f5cf83e7139466256983
-
SHA1
3c5bf9247b9640cabfcdd680c4b5db0db5c340ee
-
SHA256
449044c4f3133b81720fd3a44d836c71ace1f4551251e402fc3c89395e7f0a1a
-
SHA512
57d2ad655878503203ad8f035b3a11d78d3fe681f7f9d0c5dee9bfeacc9769d08d83f85ff297643748f9ad5e469a1591c15e6f9872bb759b4cfe4182511bc936
-
SSDEEP
384:+oLV8bWiuIYEe59afO9nGJfZKwl/IRDSQ:fLiu9t5b9nMH/cDS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b79252894809f5cf83e7139466256983_JaffaCakes118
Files
-
b79252894809f5cf83e7139466256983_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f97f63859212386c808ea36baae8600
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
SetSecurityDescriptorDacl
msvcrt
strcpy
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE