Static task
static1
Behavioral task
behavioral1
Sample
b8d431559f6b791b8feca37cdf1b5cd0_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b8d431559f6b791b8feca37cdf1b5cd0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b8d431559f6b791b8feca37cdf1b5cd0_JaffaCakes118
-
Size
88KB
-
MD5
b8d431559f6b791b8feca37cdf1b5cd0
-
SHA1
9bf449d44944922667498aa0214d7d874556f091
-
SHA256
a101eaf628d313f39b5843b8cc1e00d2e11180be8d83515116cc9262fef27214
-
SHA512
2878e03f6548b88c63021604805a6ea268a4741a37f867a49b3999f76eb37d09986fb25fc106506692047b1ec26f4d36e3e4e022d764dd6405dab48cf25fd1d2
-
SSDEEP
1536:j+fZLBplDwt+KWQ/+gY71ISPOox5JhkPlAkxbB6z6YPJJj:jYJBzcUi2Oox5Jhk2c+64
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8d431559f6b791b8feca37cdf1b5cd0_JaffaCakes118
Files
-
b8d431559f6b791b8feca37cdf1b5cd0_JaffaCakes118.dll windows:4 windows x86 arch:x86
a1c381e93e917d0ab8097679757c99ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCommProperties
SetFileApisToOEM
GetSystemTime
CloseProfileUserMapping
WaitForMultipleObjectsEx
BindIoCompletionCallback
OpenWaitableTimerA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
atsec0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
atsec1 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
atsec2 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.atsec3 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ