nujkwbqcy
Static task
static1
Behavioral task
behavioral1
Sample
087985dec6d901c15b1b10343a24ec49_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
087985dec6d901c15b1b10343a24ec49_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
087985dec6d901c15b1b10343a24ec49_JaffaCakes118
-
Size
424KB
-
MD5
087985dec6d901c15b1b10343a24ec49
-
SHA1
890c75220711f5a73bc66d2c100bf257a8293f9a
-
SHA256
dd02f3a61e7f71d39b2e2e531abb994535083b927fd4f4123148e741d3c6360f
-
SHA512
448212215dcbce5533b0863c46854a49f487cee0c4187d13a04d61da52f2744ce69f6ff1ae5132296d184043f1ff45289ce88ba98f619118e6d35bb656846036
-
SSDEEP
12288:Lk5hCVz4pC6i3syGDkxMQwAX/hHYgjnqBIB3sf:44VkJD5u1jqqB3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 087985dec6d901c15b1b10343a24ec49_JaffaCakes118
Files
-
087985dec6d901c15b1b10343a24ec49_JaffaCakes118.dll windows:4 windows x86 arch:x86
be22eabf6f34a21e86af084c0d2a5b7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
UrlCanonicalizeA
kernel32
HeapFree
HeapAlloc
GetProcessHeap
user32
GetSysColor
winmm
mmioOpenA
Exports
Exports
Sections
.code Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 422B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 356KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ