Static task
static1
Behavioral task
behavioral1
Sample
fef9a983cffcbbaf599206bf4889f8e5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fef9a983cffcbbaf599206bf4889f8e5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fef9a983cffcbbaf599206bf4889f8e5_JaffaCakes118
-
Size
20KB
-
MD5
fef9a983cffcbbaf599206bf4889f8e5
-
SHA1
5ec55d6968b48d1197f05233ebbb836688f961dd
-
SHA256
14869049bbf25d034f4136d870aaa6508e0a37d68bb0a7bdcb05f61c05261adf
-
SHA512
6165ae9aa59f29d32db0487cecd09f5cf87cb2143a04d4e72426dafd41e4622c663289a29c983a1527b661da5731983b83353a9b9d1e9e941b9497abfb97e4d7
-
SSDEEP
384:nCfqeODhGwaGaW1gD7C9AzWA9zdOfA3X97CpWpL71TCB:nCCjDgwaGaUgDmmzWA9h3X9W8ptC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fef9a983cffcbbaf599206bf4889f8e5_JaffaCakes118
Files
-
fef9a983cffcbbaf599206bf4889f8e5_JaffaCakes118.dll windows:4 windows x86 arch:x86
88b2be634d94e89de38cd5a5cff6cede
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualProtect
VirtualFree
gdi32
LineTo
Sections
.text Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ