rand
Static task
static1
Behavioral task
behavioral1
Sample
b79cb56472068c757c43a3a50329d2c0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b79cb56472068c757c43a3a50329d2c0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b79cb56472068c757c43a3a50329d2c0_JaffaCakes118
-
Size
10KB
-
MD5
b79cb56472068c757c43a3a50329d2c0
-
SHA1
0cd6553ed69022d2557e35f78fecb0380ffec7c4
-
SHA256
1aa1b988dacc3534229cce21b08110c8fc26abce851e0d57fdf136b7c1671d7d
-
SHA512
37ab1bbc2756fb98b00465acd02957b97a63551d72500f12d3c0a0a4df84be27bc4743f9f900b42215a3913f023f82b930f100d2c6b8988a78e7b72a5d85c145
-
SSDEEP
96:Z11U/eGu7IRXxdyRgE3jzSdFaMpBMcndPscqd2CVXGPW9NkSl:ZUmGaIR/yOE/SbpBMcn9scW6WH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b79cb56472068c757c43a3a50329d2c0_JaffaCakes118
Files
-
b79cb56472068c757c43a3a50329d2c0_JaffaCakes118.dll windows:1 windows x86 arch:x86
96fa89c2bd4a17435db0c16b55c67ed2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
DeleteFileA
ExitThread
ExpandEnvironmentStringsA
GetFileTime
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetFileTime
Sleep
WinExec
user32
MessageBoxA
wsprintfA
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE