rand
Static task
static1
Behavioral task
behavioral1
Sample
cf14b097796493bd5b6ec3700e144989_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf14b097796493bd5b6ec3700e144989_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
cf14b097796493bd5b6ec3700e144989_JaffaCakes118
-
Size
10KB
-
MD5
cf14b097796493bd5b6ec3700e144989
-
SHA1
2b809030c3bc04d7297d6d067d082f102de367e4
-
SHA256
b6542d23dea0251681386077cb4967adb98d765ecc5544a4a60f38027759b59a
-
SHA512
224435fd25d05e20a48a8bbeb8432f6b70c14da8b0219d00c40ba1332d1c5d92d5d269524fb4dcff36d122eedee53162430c9906c265deec4431ce246607e496
-
SSDEEP
96:Z149dNyQyNYsR8y5gxCHSS2gEvcr73Ez2fThpXybiQUPW9NkSl:ErN13sR8y2xISS29cHEqfmbjeWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf14b097796493bd5b6ec3700e144989_JaffaCakes118
Files
-
cf14b097796493bd5b6ec3700e144989_JaffaCakes118.dll windows:1 windows x86 arch:x86
d11c7656e7a202a9878c8f2fd8789a21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
DeleteFileA
ExitThread
ExpandEnvironmentStringsA
GetFileTime
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetFileTime
Sleep
user32
MessageBoxA
wsprintfA
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE