input
Static task
static1
Behavioral task
behavioral1
Sample
dd2a253250fd2488e2ab229ce8c03352_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd2a253250fd2488e2ab229ce8c03352_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dd2a253250fd2488e2ab229ce8c03352_JaffaCakes118
-
Size
20KB
-
MD5
dd2a253250fd2488e2ab229ce8c03352
-
SHA1
b1544f4b416b0bd5091596146de80677f6e5225e
-
SHA256
3a2f39d51d5884628fef256bbb46b7fe783a610d97bede774d175b2819606394
-
SHA512
bfd99ee5e4eafed141f86f111b4d4e0a45dd5280d0749a111342f7d3940c3e046538096569a66a767c04295b11d276c1b88bf7e18e6408126b987a58a49314ad
-
SSDEEP
384:u6IElolZJU3TdgAOCEH3BrkTqF/nVKS/mFZZB3R6Cckx4v:yJZw9UHtYqPKj1B3ykxU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd2a253250fd2488e2ab229ce8c03352_JaffaCakes118
Files
-
dd2a253250fd2488e2ab229ce8c03352_JaffaCakes118.dll windows:4 windows x86 arch:x86
da4ac79484c40146e40f1cdff49ddc8c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
free
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE