filkl
Static task
static1
Behavioral task
behavioral1
Sample
b79b66e62ec1257b43bcce7d8261f217_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b79b66e62ec1257b43bcce7d8261f217_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b79b66e62ec1257b43bcce7d8261f217_JaffaCakes118
-
Size
372KB
-
MD5
b79b66e62ec1257b43bcce7d8261f217
-
SHA1
0801a132e82ff6ef029ec4fcd950663900aba9dd
-
SHA256
44ba9134082a19c914e717ef58c34358a6a447b5fc5192e6bc4eddd07808d635
-
SHA512
313709cb82c39cdb458beb2950c881c773a8f6e91a981879f1be1eba979963284028b665bb6953c086ac1291befbf4072e8e22965c8c633baca687dbdbb1ba4f
-
SSDEEP
6144:SGpESkxJMoQmX/1Xd8Fqej6biZxv6GGPV6A8jr8MM84J8rDBwUI7d3:3fkx9QmV0z6bi7SGqMLrM8QO1wUI7d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b79b66e62ec1257b43bcce7d8261f217_JaffaCakes118
Files
-
b79b66e62ec1257b43bcce7d8261f217_JaffaCakes118.dll windows:4 windows x86 arch:x86
c2a0e1fbec69167f4ef311bd13bbbc53
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCanonicalizeA
kernel32
Beep
GetSystemInfo
HeapAlloc
HeapFree
GetProcessHeap
winmm
mmioOpenA
Exports
Exports
Sections
.code Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 406B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ