Static task
static1
Behavioral task
behavioral1
Sample
4313e11cc67fa67d180b512bd10e193e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4313e11cc67fa67d180b512bd10e193e_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
4313e11cc67fa67d180b512bd10e193e_JaffaCakes118
-
Size
69KB
-
MD5
4313e11cc67fa67d180b512bd10e193e
-
SHA1
960a701a7991ab6f2a094360fe8de918eea6eb8a
-
SHA256
96eece9b1bdf77500c8e70508bfa247fc3ca61aaf9cd7779d9c6fa3a7bab9ddb
-
SHA512
8ad95c448be5498b3995d91ef12eec15a2abfd8454f0372d43c57abafb92c62e2534b0c24a229cfd6d0792642f0ae8b00576ca121ae911d5e78b50a12c691eb4
-
SSDEEP
1536:olnP4KPEjiHACC1sQzgkAfvAPqximcKtJyz3+IK:olP4iEjiHAvEthjIuIK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4313e11cc67fa67d180b512bd10e193e_JaffaCakes118
Files
-
4313e11cc67fa67d180b512bd10e193e_JaffaCakes118.dll windows:4 windows x86 arch:x86
5959c7cbf2d7d913f2d8909d7846b7a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TlsFree
lstrlenA
SleepEx
ExitThread
ExitProcess
advapi32
RegOpenKeyExA
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ