uCXDbrWHoKOicXLf
Static task
static1
Behavioral task
behavioral1
Sample
17259a341db3d82b8b4fa3878f91d8d0_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
17259a341db3d82b8b4fa3878f91d8d0_JaffaCakes118
-
Size
101KB
-
MD5
17259a341db3d82b8b4fa3878f91d8d0
-
SHA1
cb0deb0b659196ea6720adb9f8039f3e36c46ee2
-
SHA256
498869d0da515cc667119ab43878289da6383499931d4d23e49b0841232f7848
-
SHA512
03ed48eab58ec1553309825845102326dc54fa1693edede217634babcd985825aea65e51790c4eb6f003a804e8bc6068f6a4835936725e729aa7f9695a5c01e2
-
SSDEEP
3072:v+idx4kg7P8/Yg+z1M/XP0erBk68CS2HZn:ZYP8/j41sX/SCSwx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17259a341db3d82b8b4fa3878f91d8d0_JaffaCakes118
Files
-
17259a341db3d82b8b4fa3878f91d8d0_JaffaCakes118.dll windows:4 windows x86 arch:x86
3ac6feb71b44360c33414b202e9e30b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
InterlockedCompareExchange
GetProcessHeap
GlobalMemoryStatusEx
GlobalFindAtomW
TerminateThread
WriteFileEx
EnumSystemCodePagesA
EnumTimeFormatsW
GetTapePosition
ReadFileScatter
SetThreadIdealProcessor
ClearCommBreak
InterlockedIncrement
GetVersionExW
LockResource
lstrcmpA
GlobalAddAtomA
GetConsoleCursorInfo
GetDateFormatA
CreateFileMappingA
HeapCompact
FindFirstChangeNotificationW
CreateTapePartition
SetCriticalSectionSpinCount
ntdll
isdigit
msvcrt
printf
Exports
Exports
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 352B - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ