Static task
static1
Behavioral task
behavioral1
Sample
d1d04b262d58c2680e1c88bbe760c84e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1d04b262d58c2680e1c88bbe760c84e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d1d04b262d58c2680e1c88bbe760c84e_JaffaCakes118
-
Size
14KB
-
MD5
d1d04b262d58c2680e1c88bbe760c84e
-
SHA1
895b1e33e098f91915975e0ef45ddf06d8f29633
-
SHA256
4f44d6e3fd003b8cf02ee1cbab5623a395ea5682e21bc757dd888c829546824c
-
SHA512
2803645885905d83f18ec96c6db00217f0f10ad9f6494c0d1e0481020bc6d2dff7f2c024909c3dd4e591c01cb9b0a03b75d8fe5cbcd0d228c08304099839bb15
-
SSDEEP
384:hhv1xPaOueIxAsyApCABFAFG1rn/MoAREVp57Pj9oAHCHhH0HOWHtce/t1DDd:xxPoeIWEVRofk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1d04b262d58c2680e1c88bbe760c84e_JaffaCakes118
Files
-
d1d04b262d58c2680e1c88bbe760c84e_JaffaCakes118.dll windows:4 windows x86 arch:x86
726f43d278c57146f314690bd2457c03
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsBadCodePtr
LoadLibraryA
FreeLibrary
VirtualProtect
msvcrt
malloc
free
strncpy
strstr
_snprintf
ws2_32
inet_ntoa
gethostbyname
gethostname
WSAStartup
send
WSACleanup
Sections
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ