Static task
static1
Behavioral task
behavioral1
Sample
f6a76384490134b1ba54028d06af29cb_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6a76384490134b1ba54028d06af29cb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f6a76384490134b1ba54028d06af29cb_JaffaCakes118
-
Size
51KB
-
MD5
f6a76384490134b1ba54028d06af29cb
-
SHA1
bbec3bed6e9c2ad94175eafc4eedd3db9bd02d0d
-
SHA256
534bca145fc6e5b5cab4d2a4d8a20713d8a02e49b0f026ab6d1efcb507e4525a
-
SHA512
345b9db2549e2f173e5c2f4024031872af5d1041e8d3e12c2c42afd636015e75a6360270247f1dcc5d5abda5b75fb4edc0f752610d1cf2581526540de12e869f
-
SSDEEP
1536:vY/iz2A3dh7PzSbsoKm4ZWEB2sb4VuTxu59:vagZT7zJZWEBnuulq9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6a76384490134b1ba54028d06af29cb_JaffaCakes118
Files
-
f6a76384490134b1ba54028d06af29cb_JaffaCakes118.dll windows:5 windows x86 arch:x86
76827e18d71b17f910e4b3d383d5490e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcr90
__clean_type_info_names_internal
Sections
.text Size: 45KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE