Static task
static1
Behavioral task
behavioral1
Sample
551bf8c0aa9ba6a64068069c814e57ff_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
551bf8c0aa9ba6a64068069c814e57ff_JaffaCakes118
-
Size
120KB
-
MD5
551bf8c0aa9ba6a64068069c814e57ff
-
SHA1
b72244eba1e25d908007db42ad7e79726148fce1
-
SHA256
d0409ec0fe200795bede2fbadc9efb7f07abfc0ffe044de8bafbf1b92a8d79e7
-
SHA512
1d376f32103dc4c5cb4bef5d79dec740afea76508d85c16b8cc25c8070610c646d28f372ae392180d185f3dd3a7ec64013fce3d55b2dbba068b6bc3094f30a9d
-
SSDEEP
1536:zjawkGrDqXOT3TwcDJZQrL2ddrADxQx3DF6H+DF+rsLSpV6ABO:fP/rD73TwcDLQ32d50WBDF6H+MrsLiB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 551bf8c0aa9ba6a64068069c814e57ff_JaffaCakes118
Files
-
551bf8c0aa9ba6a64068069c814e57ff_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ