DllStart
Static task
static1
Behavioral task
behavioral1
Sample
c1524d3b9882bc95457c3e853d1c3113_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c1524d3b9882bc95457c3e853d1c3113_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c1524d3b9882bc95457c3e853d1c3113_JaffaCakes118
-
Size
128KB
-
MD5
c1524d3b9882bc95457c3e853d1c3113
-
SHA1
d4b40700b4f231e86cae49bd6fe57376888b1486
-
SHA256
a449f271c5fcac681827c15868d78d7eef99ae903f18406bfb2373c7cb3da209
-
SHA512
071d2e819fa15bb93fc2e037aac3346539ddf36ff2e1355c23ed5e78d08f09eca8fc56adce216cba08da473ada5c0469ad2888e7cc0af3a2914aa964218277a5
-
SSDEEP
3072:5OMDfB5LcedwkLq8uf4joZilI6c+VLs9w06KSXEx:5bjLx7uTYc99wySXEx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1524d3b9882bc95457c3e853d1c3113_JaffaCakes118
Files
-
c1524d3b9882bc95457c3e853d1c3113_JaffaCakes118.dll windows:5 windows x86 arch:x86
8246610f53452e3464414c6f5f9bb517
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
GetProcAddress
ole32
OleRun
oleaut32
SysFreeString
ws2_32
htons
iphlpapi
SetTcpEntry
libmysql
mysql_init
mpr
WNetAddConnection2A
rpcrt4
UuidToStringA
Exports
Exports
Sections
.text Size: 114KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
05xXQ3K0 Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ