f
Static task
static1
Behavioral task
behavioral1
Sample
151fd8a849ed81099054b5f6d1b6ad55_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
151fd8a849ed81099054b5f6d1b6ad55_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
151fd8a849ed81099054b5f6d1b6ad55_JaffaCakes118
-
Size
36KB
-
MD5
151fd8a849ed81099054b5f6d1b6ad55
-
SHA1
bdeb575be3aa14333f3fd39934adec4c3aa63c8b
-
SHA256
4b09d6dbd18cd63ca7e06248062e998e7df052c819b6fee32dea38dfe2dbb3b9
-
SHA512
aa8c9f662b20809602d15ce3ffc556f65e100a2fd83b9b10b63ccc7db3a3ca5a78e4fd4912142ec2613aaa3354b22eb1497fd4c9e37bdd14da14be7e8443aba9
-
SSDEEP
768:94XTvvQhRjbacva8T8OhfGGfcGfNGfLatXIJStXIJtXIEJtXIEatXIEB:9mLQ/PacXuGkGVGj1MEsELEB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 151fd8a849ed81099054b5f6d1b6ad55_JaffaCakes118
Files
-
151fd8a849ed81099054b5f6d1b6ad55_JaffaCakes118.dll windows:4 windows x86 arch:x86
b1fde03e6f0ecb97386cda71c4fec3fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
CreateThread
Sleep
MoveFileExA
GetModuleFileNameA
GetLastError
CreateMutexA
wininet
InternetOpenUrlA
InternetOpenA
Exports
Exports
Sections
.text Size: 736B - Virtual size: 736B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 36B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ