rand
Static task
static1
Behavioral task
behavioral1
Sample
e27c8c5a0c2b92276dee6dd364f6ea3b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e27c8c5a0c2b92276dee6dd364f6ea3b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
e27c8c5a0c2b92276dee6dd364f6ea3b_JaffaCakes118
-
Size
10KB
-
MD5
e27c8c5a0c2b92276dee6dd364f6ea3b
-
SHA1
da7b3f570e15f374b3804c329308f05e05fd7edf
-
SHA256
cfc35170ae436f40bdb635f217c6164a1b179358b5e598372ec31ea9e18bbbc3
-
SHA512
cc20b4f79e5c3a8ef8ddf2927c6150da32e8ee1d600a0e5021e4e4b4aefff16b06ee52b0ffc1b5816299842305066410a8c8401092c89f474cfe5391b9f7cab7
-
SSDEEP
96:Z1lobu+KBNsMNVRyG5g8V6+BrSbNUT4cyDmnkDQQsiPW9NkSl:JEKB6mVRyG2orBrSbNA4ctfcWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e27c8c5a0c2b92276dee6dd364f6ea3b_JaffaCakes118
Files
-
e27c8c5a0c2b92276dee6dd364f6ea3b_JaffaCakes118.dll windows:1 windows x86 arch:x86
b598b927a6146b1ef8b218042fa6fa27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateMutexA
ExitThread
ExpandEnvironmentStringsA
GetFileTime
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
GlobalFree
ReadFile
SetFileTime
Sleep
user32
MessageBoxA
wsprintfA
Exports
Exports
Sections
.Proxy Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE