f
Static task
static1
Behavioral task
behavioral1
Sample
1099a022d1c6d47b3ff6c0da1d61bcbe_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1099a022d1c6d47b3ff6c0da1d61bcbe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
1099a022d1c6d47b3ff6c0da1d61bcbe_JaffaCakes118
-
Size
39KB
-
MD5
1099a022d1c6d47b3ff6c0da1d61bcbe
-
SHA1
4c6b5ee7776d318d26257ed9f9a2c45ef8ed99ee
-
SHA256
ddb112cf76b33e8be80da8098f55020067954f7c075ee3bec4860016f399316b
-
SHA512
36bdaa3e6f49f853ce8ce17982920844cf33a9228f14ec538b6916523cf326f1c766856f5681f2bc95fafaa57edb3576e5693b23f997413aa3c65e93468dd6d0
-
SSDEEP
768:94cTvvQhRjbacva8V8SrfGGfcGfNGflCtXIStXI1tXIEcmhtXIELtXIrtXIE0:9JLQ/PachbuGkGVGdvQEsEOuE0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1099a022d1c6d47b3ff6c0da1d61bcbe_JaffaCakes118
Files
-
1099a022d1c6d47b3ff6c0da1d61bcbe_JaffaCakes118.dll windows:4 windows x86 arch:x86
b1fde03e6f0ecb97386cda71c4fec3fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
Sleep
MoveFileExA
GetModuleFileNameA
GetLastError
CreateMutexA
wininet
InternetOpenUrlA
InternetOpenA
Exports
Exports
Sections
.text Size: 736B - Virtual size: 736B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 36B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ