Static task
static1
Behavioral task
behavioral1
Sample
2956262cb6d244b4d837f10ebabe5401_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2956262cb6d244b4d837f10ebabe5401_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
2956262cb6d244b4d837f10ebabe5401_JaffaCakes118
-
Size
79KB
-
MD5
2956262cb6d244b4d837f10ebabe5401
-
SHA1
6a3643cb92a0b235c0ab607ce21ed10b3ec58986
-
SHA256
79062c797bd512a1b05ee487b0138d92da26ac9a03f21820e2f271aeca22dbc8
-
SHA512
cc368e5af8e85b54242d8f0fd25d38c25349eef29daff0080710c2704ce58bda5de8f9eb081ce366f4e0b7ea9bd2e344feb3a892aab5de30f7688baa6f32fba9
-
SSDEEP
1536:/qfdZmOpV9BQTyVlwq9R59ZR8CyF3WKC6pgOI/5OjARLLLLQDUwGk4:/qVZmM0yB59ZGmKC6pgOIhJYGk4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2956262cb6d244b4d837f10ebabe5401_JaffaCakes118
Files
-
2956262cb6d244b4d837f10ebabe5401_JaffaCakes118.dll windows:5 windows x86 arch:x86
58d3ebe9d1a527a50a9804fc408518b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcatA
GetWindowsDirectoryA
VirtualAllocEx
CreateFileA
LoadLibraryW
GetProcAddress
advapi32
RegOpenKeyExA
ole32
StgOpenStorageEx
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 344B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text2 Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ