Static task
static1
Behavioral task
behavioral1
Sample
1194c0db5d03e971ca65bb72f5817485_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1194c0db5d03e971ca65bb72f5817485_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
1194c0db5d03e971ca65bb72f5817485_JaffaCakes118
-
Size
45KB
-
MD5
1194c0db5d03e971ca65bb72f5817485
-
SHA1
9a72cb01761e0c90a35edccd7dc05ba6be496030
-
SHA256
a88626289c110a558329671e39d41010274c5aedf834dd470c846bee1e2d5308
-
SHA512
1304bc19f18b23a2065584dc5185e9be6ce03c66a71fbead250b149ceda1e1e339c56d9633ca210be0753ce7d72c6500157bfa23afbcfddf509c33b4f0b87479
-
SSDEEP
768:kTCMS0D+/H3NNGaFqnsCkC/v2LnWKyQUOMR424vkTZ+:k8H/XrGaFDeUWKL8mF6+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1194c0db5d03e971ca65bb72f5817485_JaffaCakes118
Files
-
1194c0db5d03e971ca65bb72f5817485_JaffaCakes118.dll windows:4 windows x86 arch:x86
4a816adb8f9616bd80a1316cb1e21d4d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetWindowThreadProcessId
wininet
InternetReadFile
ws2_32
getpeername
advapi32
RegOpenKeyExA
msvcrt
time
Sections
.text Size: 35KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE