_StartRun@16
Static task
static1
Behavioral task
behavioral1
Sample
eefa71f9551d7b292bb268ae2eae5f21_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eefa71f9551d7b292bb268ae2eae5f21_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
eefa71f9551d7b292bb268ae2eae5f21_JaffaCakes118
-
Size
24KB
-
MD5
eefa71f9551d7b292bb268ae2eae5f21
-
SHA1
e3466001f448f747cb78050fdf417a0eb56380a7
-
SHA256
6c4f2cf1d7f9cd72b56343e10c1d299ba6a515aa0198c5e93d64df1c1250238a
-
SHA512
cc65a1c468d29958350f2c07fd03ffaf60783fec3c0fd60439535caa67204a48cbf2b9e36092c68993ac0e8e607748bde5d93dccc4f5ca956f3b213f9bd25667
-
SSDEEP
96:QgoQLLn26aDQ+Chbn67kAzf9GkOPNSzKu6BuBcXmeq48RjYV2sAzsM/iPHnWaf+c:DSQ+cb6779kXBp58/iPHWawm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eefa71f9551d7b292bb268ae2eae5f21_JaffaCakes118
Files
-
eefa71f9551d7b292bb268ae2eae5f21_JaffaCakes118.dll windows:4 windows x86 arch:x86
1ec3862e4f6f823a327fca702199e3a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemDirectoryA
DeleteFileA
CloseHandle
GetFileTime
CreateFileA
SetFileTime
SystemTimeToFileTime
GetSystemTime
user32
PeekMessageA
TranslateMessage
SetTimer
SetWindowPos
SetWindowLongA
GetWindowLongA
CreateWindowExA
DispatchMessageA
WaitMessage
KillTimer
PostQuitMessage
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassA
GetSystemMetrics
GetMessageA
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
wininet
InternetQueryOptionA
InternetCheckConnectionA
msvcrt
_adjust_fdiv
malloc
_initterm
free
fwrite
isalpha
isdigit
fopen
fseek
fread
fclose
sprintf
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 358B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ