Static task
static1
Behavioral task
behavioral1
Sample
ce627fa960dfa6de8041792a03dc2b36_JaffaCakes118.dll
Resource
win7-20240729-en
General
-
Target
ce627fa960dfa6de8041792a03dc2b36_JaffaCakes118
-
Size
539KB
-
MD5
ce627fa960dfa6de8041792a03dc2b36
-
SHA1
8d8cbcd2f77f719753f8fa5f3f8ebaaed9b51fb8
-
SHA256
7d1613fd3b3538139b2639134af1e12e69814f2bfd0d0a95270051dc708e84ef
-
SHA512
fcaf8502a2c1cd6dccc761117b31b76250132c096ce4d977ca44d7e1521fc7889da71de367de701139ce8f00337b5c3653b02c12b208eadf06fb7bb13cb029f5
-
SSDEEP
6144:UFnlVbb6ZY2wU7HuAmHKmlEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesNU:O6pyqTwr03pdf8vhhOKJETO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce627fa960dfa6de8041792a03dc2b36_JaffaCakes118
Files
-
ce627fa960dfa6de8041792a03dc2b36_JaffaCakes118.dll windows:4 windows x86 arch:x86
0ac8d64229b1235587914c70848cbaad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
VirtualAlloc
VirtualProtect
GetProcAddress
lstrcmpA
lstrlenA
lstrcatA
winspool.drv
EnumPrintersA
gdi32
IsValidEnhMetaRecordOffExt
ole32
MkParseDisplayName
Sections
.code Size: 533KB - Virtual size: 533KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE