input
Static task
static1
Behavioral task
behavioral1
Sample
766C62914706A0FF2BCA6880B1E92601.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
766C62914706A0FF2BCA6880B1E92601.dll
Resource
win10v2004-20240802-en
General
-
Target
08f731e7e384e81227506458a5fe1c14_JaffaCakes118
-
Size
16KB
-
MD5
08f731e7e384e81227506458a5fe1c14
-
SHA1
6f5b9fe865de8a6e2cbbecf4469f1d261876f47a
-
SHA256
94151a1bf319c83e9ee9acceb3a36c19d754ef4d98706b409b4fa02e994f39b8
-
SHA512
9bfc532261da229ab58e81c948b5f9aaad3fe005b168d61ed56f30477b55114c224372cec0ec06282b5a3572ad66e7ee6377a9b746d8fe4bd4f8395cad3fb8f7
-
SSDEEP
384:oP9YRkI4dO7Rbw/ying0B/4m3xVFj732itvwX/8piwaqJJI:9RkRdIKaWn/4m3xv73TwQo1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/766C62914706A0FF2BCA6880B1E92601.DLL
Files
-
08f731e7e384e81227506458a5fe1c14_JaffaCakes118.rar
-
766C62914706A0FF2BCA6880B1E92601.DLL.dll windows:4 windows x86 arch:x86
c1f8dce0359a302284d52a7ed373d7ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_stricmp
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE