Static task
static1
Behavioral task
behavioral1
Sample
53ff599ef9c159d19fe116e9ebc37576_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
53ff599ef9c159d19fe116e9ebc37576_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
53ff599ef9c159d19fe116e9ebc37576_JaffaCakes118
-
Size
41KB
-
MD5
53ff599ef9c159d19fe116e9ebc37576
-
SHA1
a9deabf2795e4ef163743acf08b45686c606ca1c
-
SHA256
67c1ebbb5df66df1834e9caec94abac1e290af29c5028b015df5b3e49c48a6cc
-
SHA512
2507a8116bc633a9916a7b17ca1b89fe76d90ce6d5b7c96f0cbc37d5f6ec7e1e16399ac8a0ba3e2952aaefa0b24a859ea3ae9708ef9d544ab0e0626062b60393
-
SSDEEP
768:EzfTP8034P0e8dtHeqg9EcQnteCaarDP2h/A1JYqkP8AqrDAV7NHDe/t2g:Ev803YA3fQEdte/aroA14P5AcDet2g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53ff599ef9c159d19fe116e9ebc37576_JaffaCakes118
Files
-
53ff599ef9c159d19fe116e9ebc37576_JaffaCakes118.dll windows:4 windows x86 arch:x86
0af5a1306a8e4c20cd6a3f64a0d83260
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
ioctlsocket
user32
MessageBoxA
advapi32
CopySid
Sections
.text Size: 35KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE