DllMoveFile
Static task
static1
Behavioral task
behavioral1
Sample
3f72e259e5b4f9735163b691254e613d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f72e259e5b4f9735163b691254e613d_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
3f72e259e5b4f9735163b691254e613d_JaffaCakes118
-
Size
24KB
-
MD5
3f72e259e5b4f9735163b691254e613d
-
SHA1
d5e43590fc1ede0368fcccbffb3c9799d67c90e2
-
SHA256
b8af7a31c1592d24124f3dcc9ef2c8fdd9d9e560ef19da6410b6db27d1eb0d63
-
SHA512
1718e49e19b50aa97d359529a0c089ee200c8cd2a1c16bf5d2fc1ec0b41a20846f9b4dd21f23af6ed94d44514eb68e2e8fb28c0f73799ae70feac4770b7f23a3
-
SSDEEP
768:lCRkvs7hk5NPmcsUFO8qR5ban5J5hTUS2+BU:lCREeS5NeTIWmn5JDTUS2+C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f72e259e5b4f9735163b691254e613d_JaffaCakes118
Files
-
3f72e259e5b4f9735163b691254e613d_JaffaCakes118.dll windows:4 windows x86 arch:x86
e58ab46f2a279ded0846d81bf0fa21f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE