Static task
static1
Behavioral task
behavioral1
Sample
2c2b08de99d9202b7c911e96a803a762_JaffaCakes118.dll
Resource
win7-20240704-en
General
-
Target
2c2b08de99d9202b7c911e96a803a762_JaffaCakes118
-
Size
120KB
-
MD5
2c2b08de99d9202b7c911e96a803a762
-
SHA1
c9a4af9eb5f3d077a38cbb4136da0ff413c3160b
-
SHA256
e8a4419884539dcf7ede02ea0a37c121264896d81fb6eab611cc7a263aa719a6
-
SHA512
658e215db2a7496b6f465a153e8c76f9975a1616dfa24fd27e21382475d2c7fcbb27287a18637b37fd9a147a5a93f16c3aba42b4fc0b689907acecd40d9e0d30
-
SSDEEP
1536:IXw3qNq6GtnEug9eoAb7jkX4vK11Z+Afe21A5EYU/l4FDpB00fjb1EH9VMz:IXYq4zSmXjSRr+Afez6Y/DpBLjbW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c2b08de99d9202b7c911e96a803a762_JaffaCakes118
Files
-
2c2b08de99d9202b7c911e96a803a762_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ