Static task
static1
Behavioral task
behavioral1
Sample
005bc56ff53ce662cb6381a919db2d50_JaffaCakes118.dll
Resource
win7-20240708-en
General
-
Target
005bc56ff53ce662cb6381a919db2d50_JaffaCakes118
-
Size
17KB
-
MD5
005bc56ff53ce662cb6381a919db2d50
-
SHA1
ee05b9e22bca3e06f2bab3b0f02eccb103420acd
-
SHA256
e5630f0a0c5c2e0ae9fe35a23f3933f33addc207d6d2024055473bb5936861b7
-
SHA512
88f0e1495c6bb8dd7253a48a435de318e3e1b3f4aeb0c1270aea976c75390a9acb52bba3df927bba928d05a6ec546ea0d2022065ea051578b07c9bc6f684505b
-
SSDEEP
384:oFW/MlZCCquc72/4WNQdEHDxnUCXaSasWH:XUjZe2/4WCYDxnUOaXlH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 005bc56ff53ce662cb6381a919db2d50_JaffaCakes118
Files
-
005bc56ff53ce662cb6381a919db2d50_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE