Static task
static1
Behavioral task
behavioral1
Sample
11f1185d2d33486a35ff7a3a477bbe14_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
11f1185d2d33486a35ff7a3a477bbe14_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
11f1185d2d33486a35ff7a3a477bbe14_JaffaCakes118
-
Size
239KB
-
MD5
11f1185d2d33486a35ff7a3a477bbe14
-
SHA1
40e68b7ef31b108e0cdb0520e160d4a805c6ff35
-
SHA256
df5e2e44f446be690d7428f2acb2e639be3993f5c1904c63e7d87872c199aff2
-
SHA512
9dea149050387a12a4fa9cbae1485a6976f8971d1f7e44d9a12e4efe37f3ac0ec53a05e9c9f86f7afc5b788c55784d42c77223599fcaf7e28bc7dc3a9fe7f97a
-
SSDEEP
3072:CgDbsFk6KkvLhsQ5k0a+3urhqjLKVIGx04yDwRsxzQTQLGwv6YfVfIzkeK5+Ryh:zDbOkkDmQ5/D3ud7xFRWb6wCIVAz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11f1185d2d33486a35ff7a3a477bbe14_JaffaCakes118
Files
-
11f1185d2d33486a35ff7a3a477bbe14_JaffaCakes118.dll windows:4 windows x86 arch:x86
36e0b1167a2e10b1017f49a9042a293d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapAlloc
HeapFree
LoadLibraryA
GetLastError
FlushFileBuffers
SetStdHandle
SetFilePointer
CloseHandle
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ