Static task
static1
Behavioral task
behavioral1
Sample
db7dd731835a2773c4ad61da415710fd_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db7dd731835a2773c4ad61da415710fd_JaffaCakes118.dll
Resource
win10v2004-20240910-en
General
-
Target
db7dd731835a2773c4ad61da415710fd_JaffaCakes118
-
Size
12KB
-
MD5
db7dd731835a2773c4ad61da415710fd
-
SHA1
ce114c7ce87e2ecb71bddf9c09520baa10888592
-
SHA256
59384771649c902bd8c56cd22afb6974eaca411d160d3d511669f8a27d668644
-
SHA512
5f8d366898bc1a91078f5a7d2bbd55816d092589ca46a2e8292e2c0a69b6e7b2f4fc0905ee79062b2b4b7c81d83af961fc9a191eb64bb31748da0e65709aa8b7
-
SSDEEP
192:NDOtN3gLte01Yxx0R8fBaRbGFnBO1novHtVqI670fvX+2aOdp:saY01YnA8fBsynBO1nsD4wmwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db7dd731835a2773c4ad61da415710fd_JaffaCakes118
Files
-
db7dd731835a2773c4ad61da415710fd_JaffaCakes118.dll windows:4 windows x86 arch:x86
1701423ae55bb443bfb9c3cd18dedfb0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCommandLineA
VirtualAlloc
GetModuleHandleA
VirtualProtect
CreateFileA
Sections
.text Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 66B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ