Static task
static1
Behavioral task
behavioral1
Sample
12cf5b2a346ad417f42e2f8d3ebe8823_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12cf5b2a346ad417f42e2f8d3ebe8823_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
12cf5b2a346ad417f42e2f8d3ebe8823_JaffaCakes118
-
Size
52KB
-
MD5
12cf5b2a346ad417f42e2f8d3ebe8823
-
SHA1
f59653afd68dc8e8a94d9d9b1344fa50fdec509e
-
SHA256
b2a6881dd044845ba6aa2b208c994cbb1c615c598f70abbfe85ae63316eaa1d8
-
SHA512
d921fe93be01a4bdbd21c155fc8b8094a6a17fc4a5a50d4726d9a67d70cad01d3e51e7cfa08135f94525b860eca8841081f91f1003f1488b47b290e29834b63a
-
SSDEEP
768:X2TVmkf7ex2rytDXS41QDF2+DgsJRlF1vZI3r:X2TVmkCtDXSWQ4+csDlq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12cf5b2a346ad417f42e2f8d3ebe8823_JaffaCakes118
Files
-
12cf5b2a346ad417f42e2f8d3ebe8823_JaffaCakes118.dll windows:4 windows x86 arch:x86
9f2e5c3b908be10d43a02bd865c38fe6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ord140
ord456
ord172
ord818
ord304
ord307
ord826
ord823
ord824
ord767
ord825
ord347
ord763
ord415
ord337
ord413
ord119
ord358
ord228
ord229
ord874
ord320
ord322
ord360
ord323
ord457
ord500
ord498
ord857
ord502
ord887
ord515
ord254
ord558
ord496
ord242
ord236
ord381
ord854
ord506
ord394
ord559
ord690
ord594
ord545
ord546
ord416
ord419
ord519
ord523
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ