Static task
static1
Behavioral task
behavioral1
Sample
dd746bd674e1d853a9e6d684e5bce392_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
dd746bd674e1d853a9e6d684e5bce392_JaffaCakes118
-
Size
1.3MB
-
MD5
dd746bd674e1d853a9e6d684e5bce392
-
SHA1
35aa58081afb60cafafdec9a9c5c99db656e8f0e
-
SHA256
33a408be03b981cbf7932fcd47b2120d35f28b0d85b6ac0f93e730ce75e02b6a
-
SHA512
f6dcc089278eaf544349bd628a38de2da8b3a7d0b2ad1b5e98fd770fb670f301571b06375694cbe53ba9493142e4ef8b45be02b7daa4db56da8c42e6a66b87d5
-
SSDEEP
24576:35KDjM1Go3pR9DzcxwS2hYbPe39Zn3m03bnA2s0SiOc:35MjM1Go3pR9vS2abGtN20L7s0SiO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd746bd674e1d853a9e6d684e5bce392_JaffaCakes118
Files
-
dd746bd674e1d853a9e6d684e5bce392_JaffaCakes118.dll windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 24KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
znybbuog Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fidlfkdh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE