_RSUFLODFU@0
Static task
static1
Behavioral task
behavioral1
Sample
4122dcac76d8ec10de20a11ec40c7e9f_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4122dcac76d8ec10de20a11ec40c7e9f_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
4122dcac76d8ec10de20a11ec40c7e9f_JaffaCakes118
-
Size
78KB
-
MD5
4122dcac76d8ec10de20a11ec40c7e9f
-
SHA1
ae74672d3c266bbc846b916f7fa685ae00b4c488
-
SHA256
e4ed5b537d07075313785374fc7ff8feacb8f774de41d358b8f23e907c29becd
-
SHA512
b2ca65e7770e66edb25e9a2d1e540cb0b980b7296c7823d31efa3bb3aa795193548276629e048d1364daf20c0741219dbd3d59fbb86c215259faef2047008cdd
-
SSDEEP
1536:R56Dejr9L7JqVDjBwwx1IDqRLxd7/nY0cqo:qIHJqV+0IDqhxZnYM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4122dcac76d8ec10de20a11ec40c7e9f_JaffaCakes118
Files
-
4122dcac76d8ec10de20a11ec40c7e9f_JaffaCakes118.dll windows:4 windows x86 arch:x86
f0bda567abdbaef0f83d16590e3ea8dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
HeapFree
HeapAlloc
GetProcessHeap
GetTickCount
OutputDebugStringA
GetStartupInfoA
CreateFileA
rpcrt4
RpcEpRegisterW
RpcServerListen
RpcEpUnregister
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ