Static task
static1
Behavioral task
behavioral1
Sample
c8a998887a2245be1921675776f1adb9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8a998887a2245be1921675776f1adb9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c8a998887a2245be1921675776f1adb9_JaffaCakes118
-
Size
27KB
-
MD5
c8a998887a2245be1921675776f1adb9
-
SHA1
a2433ec478ba8abd14c39128561580948de33707
-
SHA256
99f56474f4bca9f6d35718b1c8c6d3cbb321ba4b15f05660c13f8c3eb1798cfe
-
SHA512
608fecebe0f0eef2eaf3deed008331b1a316717b5603a2ecfad65801c1f691629dd2a4a49e51a0d86545755b5a85b8c994a50bcd539a27cc89853281a3add0c1
-
SSDEEP
384:xIexdr0sojc58uSfFXZG8vXHUuVQ3xg5/pcRhZF0w9yhsBUQKC6Io/+wrj8fRMmp:1xNjSfR5F0gtpsZF0w9Kn288fDrH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8a998887a2245be1921675776f1adb9_JaffaCakes118
Files
-
c8a998887a2245be1921675776f1adb9_JaffaCakes118.dll windows:4 windows x86 arch:x86
a60322751faeec87f3b9c4f536f45e7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetWindowsHookExA
advapi32
RegOpenKeyExA
shlwapi
SHDeleteKeyA
rasapi32
RasEnumDevicesA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 15KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE