sztkedxptizdpm
Static task
static1
Behavioral task
behavioral1
Sample
16aafee30971da0c782508e6c02f66e0_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16aafee30971da0c782508e6c02f66e0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
16aafee30971da0c782508e6c02f66e0_JaffaCakes118
-
Size
816KB
-
MD5
16aafee30971da0c782508e6c02f66e0
-
SHA1
eb80bdb8e3b980cd27cce400690b6988b7accb83
-
SHA256
110124df82e5c78ea1d5fa4493a1f67593dfc5605e58110f6d55ba14a10f011f
-
SHA512
44213df95d77ae93e9674b19ba410dbef2b6e44db5e0bbea2ff028ad94d6902784f6ab8119eb0a6cbd26ee2934d70c6c5e869afc73bb11850e3132872707804a
-
SSDEEP
24576:A+T9t7jcklHRygKUKiRG6jCjL7zglpaKIayc4u:A+T77jcHUKmZgoDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16aafee30971da0c782508e6c02f66e0_JaffaCakes118
Files
-
16aafee30971da0c782508e6c02f66e0_JaffaCakes118.dll windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 109KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aslalenr Size: 699KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dqtrpbdv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE