Static task
static1
Behavioral task
behavioral1
Sample
c858b701299b9560c0fa491c5dc7ffb1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c858b701299b9560c0fa491c5dc7ffb1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c858b701299b9560c0fa491c5dc7ffb1_JaffaCakes118
-
Size
252KB
-
MD5
c858b701299b9560c0fa491c5dc7ffb1
-
SHA1
8a5fc70cadc8da7ebd692e35e13b44cf56c864f4
-
SHA256
09e2ce5b199bb1aed900a6d89c8ddd06531a45f9a01586088b989f65acf08e25
-
SHA512
9e51e90f74a3b7bd416afff8550bab9eb0a84770f556cee4829ad55d73457f3a2371cc229ddd6f5bb523416f0ed589be9f58108482be8b5e924461ecbded513c
-
SSDEEP
6144:D/LQzs0f08wrTKMluVDpQ2wnnoXaH94+XkZloT/Oz:LLQ40fI/KMcVD8nZ4ekZloSz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c858b701299b9560c0fa491c5dc7ffb1_JaffaCakes118
Files
-
c858b701299b9560c0fa491c5dc7ffb1_JaffaCakes118.dll windows:4 windows x86 arch:x86
4e983cfec976e3b8abae537649c90444
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryExA
lstrlenA
ResetEvent
GetOEMCP
ReadFile
SetEvent
ExitProcess
SetErrorMode
GetCommandLineW
GetACP
SetEndOfFile
GetModuleHandleW
GetProcAddress
GetLastError
IsBadReadPtr
GetModuleHandleA
VirtualAlloc
SetFilePointer
ExitThread
SetHandleCount
Sections
.text Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 855B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 253B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 4KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 4KB - Virtual size: 926B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ