CvtNetclass
Static task
static1
Behavioral task
behavioral1
Sample
10005339c6e0b3946c9a71599f09e7bd_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10005339c6e0b3946c9a71599f09e7bd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
10005339c6e0b3946c9a71599f09e7bd_JaffaCakes118
-
Size
164KB
-
MD5
10005339c6e0b3946c9a71599f09e7bd
-
SHA1
8a3e05071332166ae89313e73706c0c3b37097eb
-
SHA256
90aa5a3b2d31e21744c1d7a5381d73a8a6ea60439a748ff01421c43c554e9124
-
SHA512
9534b22b2abc15dfd5743e6a467081de294248445d672f3ec145ae1e48ac7889d9491f43ae6dddec5c69c97837818509db423eda0826dc9602d7a6e5261243dd
-
SSDEEP
3072:CheYqa1/iuOe0+8rffXtnaZvHTT0ziO0S7EXKM7EB5wV7S+xj:/aJiuOVRrffXlG7wGIoXKkEB5w5N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10005339c6e0b3946c9a71599f09e7bd_JaffaCakes118
Files
-
10005339c6e0b3946c9a71599f09e7bd_JaffaCakes118.dll windows:4 windows x86 arch:x86
df1624230d457451cdb13b0d5dcccdc3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
ole32
CoCreateGuid
user32
ClientToScreen
PostMessageA
advapi32
RegDeleteKeyA
DuplicateTokenEx
RegCloseKey
Exports
Exports
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 459B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ