_9d9f
Static task
static1
Behavioral task
behavioral1
Sample
3c26a6ea20cf1c9c684d2c06be53fb7d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c26a6ea20cf1c9c684d2c06be53fb7d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3c26a6ea20cf1c9c684d2c06be53fb7d_JaffaCakes118
-
Size
69KB
-
MD5
3c26a6ea20cf1c9c684d2c06be53fb7d
-
SHA1
ef010b9d5dde0650f058a731b382f0fd6c005f91
-
SHA256
b0bc1214e8c0ca6404b2e7bb4c294f43eb94b687a5c41623038ddc04ab24b292
-
SHA512
f5e42a305ff8f7c8ba0dc7bbc9d7dc341d74e8caf7a388c72970a2907d69a62613aaaaecf400a597fb676afd1ee6a45567f16673f4c3ae457bf928d4ba213cc4
-
SSDEEP
1536:foD3I0cIRij6PUmzSFoPmrWXSF5jqOy47wfpiA+aihA8e:AD3XcI4+koPmrWXSF5jqOy47Haihb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c26a6ea20cf1c9c684d2c06be53fb7d_JaffaCakes118
Files
-
3c26a6ea20cf1c9c684d2c06be53fb7d_JaffaCakes118.dll windows:5 windows x86 arch:x86
49824cce8b5ffb379b448f21ecf437c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_itoa
free
??3@YAXPAX@Z
memcpy
malloc
_snprintf
strncmp
_strdup
_initterm
_adjust_fdiv
_CxxThrowException
memset
_purecall
realloc
_except_handler3
sprintf
??1type_info@@UAE@XZ
??2@YAPAXI@Z
kernel32
LoadLibraryW
GetLastError
GetVersionExW
WideCharToMultiByte
lstrcpynA
Exports
Exports
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ