rundll32
Static task
static1
Behavioral task
behavioral1
Sample
1771ec04b4c24c954676bfddf9df6830_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1771ec04b4c24c954676bfddf9df6830_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
1771ec04b4c24c954676bfddf9df6830_JaffaCakes118
-
Size
7KB
-
MD5
1771ec04b4c24c954676bfddf9df6830
-
SHA1
3f663754cb580d9fb9dfad0bd4faa1b35c82def9
-
SHA256
1e8bf07aecc4c7fa74efb0723733ec8e36e019ee09e876f8678a0535059458f6
-
SHA512
1cf8c11f87ff98e29263d3d7244ed9ddd97583b6a9998aac0013a50f4ce45b75fa8cc89f885d03fbef9e5e6bf98046229540c4912d0b6a60b0455876c6d4c955
-
SSDEEP
48:Ss0GrB23grztJrhWRmnVjG5a4Uh+cks50uHwS50Vu62qsiYDDDDDDDDuuOZS:z0/gPtJrYmVjGwd+8blPDDDDDDDDEZS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1771ec04b4c24c954676bfddf9df6830_JaffaCakes118
Files
-
1771ec04b4c24c954676bfddf9df6830_JaffaCakes118.dll windows:5 windows x86 arch:x86
01c41bde2e28b577655077042a01522f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
msvcrt
free
_initterm
malloc
_adjust_fdiv
Exports
Exports
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ