Static task
static1
Behavioral task
behavioral1
Sample
c7677068d4784dd3cef7e6c274312683_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c7677068d4784dd3cef7e6c274312683_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c7677068d4784dd3cef7e6c274312683_JaffaCakes118
-
Size
308KB
-
MD5
c7677068d4784dd3cef7e6c274312683
-
SHA1
66410a83aba082b16e333bc2c42723fde588bd1d
-
SHA256
da409e6b2e5811ed3678f82809b1b82e89095785c853a613916cd52a49bb557a
-
SHA512
780489893269bce289832afebc6d1f360ee0dffe60ebe6bf063db08fdbb769892391f9046184d2c455c65c10100c2540d919aedc4276976cd0b1dc20943537d5
-
SSDEEP
6144:KaMPmK2BvS/aANwsqFxeGULcqseZ7Z75l4Kpq0JtA5kMb1:Umhu/OsCeh+U7Zz4Kpn25kM1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7677068d4784dd3cef7e6c274312683_JaffaCakes118
Files
-
c7677068d4784dd3cef7e6c274312683_JaffaCakes118.dll windows:4 windows x86 arch:x86
d0801690c506af4acdea5b312433f4c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
VirtualAlloc
VirtualFree
GetProcAddress
LoadLibraryA
user32
GetDesktopWindow
GetDC
gdi32
LineTo
Sections
.text Size: 235KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ