Static task
static1
Behavioral task
behavioral1
Sample
bc7427aa76d8eedcb42a52b15ba4a378_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
bc7427aa76d8eedcb42a52b15ba4a378_JaffaCakes118
-
Size
120KB
-
MD5
bc7427aa76d8eedcb42a52b15ba4a378
-
SHA1
9b61315340a9259ba1a8340924065a6a2ee2f063
-
SHA256
72c79f225d86cf9dce3137bd70bb5a4a60ccd6a5f166105379cd33fad8eb850d
-
SHA512
a13031b5021771c6e46e327dcaf8b7c1975b2a8bf434178cd2f638b574aa8658876cf143218dd634afeab29106827b0bf7cf1ee82d9dd87400f3058f24c9c852
-
SSDEEP
3072:gHb0pVd0UWmJofN4M6VK1Dt73dRpzyZT:UbO7omeRMK1DtTdRpzUT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc7427aa76d8eedcb42a52b15ba4a378_JaffaCakes118
Files
-
bc7427aa76d8eedcb42a52b15ba4a378_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ