rundll32
Static task
static1
Behavioral task
behavioral1
Sample
0fcb555ea79e006b63077bb83efa56a0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0fcb555ea79e006b63077bb83efa56a0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0fcb555ea79e006b63077bb83efa56a0_JaffaCakes118
-
Size
6KB
-
MD5
0fcb555ea79e006b63077bb83efa56a0
-
SHA1
8e1f6c631067c71fa3b5137c6a39903319198c0c
-
SHA256
db89e95d0e829e9b8ee249b6f44dd8a5bb2a03605c7b1dd0cf2fa401fd6a76d5
-
SHA512
b67b929f65ecd46aaefae0f058a26dd4825c5e90e708c33bea4bd96bd1be357a1d4cf923271b04cd34eab20d9c86800226d72763f172136d1711469417e1b909
-
SSDEEP
96:z0/gPtJrYmVjGwd+8blPDDDDDDDDEZSAryvdcAEdgzZm4mHg2LMz8MdIMzCaCfWV:FTiS+siZohm4mHgg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fcb555ea79e006b63077bb83efa56a0_JaffaCakes118
Files
-
0fcb555ea79e006b63077bb83efa56a0_JaffaCakes118.dll windows:5 windows x86 arch:x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ