Static task
static1
Behavioral task
behavioral1
Sample
e901cbfbeca9c26ea2da4d210a137f2e_JaffaCakes118.dll
Resource
win7-20240903-en
General
-
Target
e901cbfbeca9c26ea2da4d210a137f2e_JaffaCakes118
-
Size
128KB
-
MD5
e901cbfbeca9c26ea2da4d210a137f2e
-
SHA1
f4671b585691afbbf4cae5615b579d6c798a9f1e
-
SHA256
7e516db9a4a9fcc5baa4caa592317b3c4f7b8bd5e8bd7238b80508c4c155f7f7
-
SHA512
1f069ad865265ff2ed36a0c3fd3961920181eca22fb2760240cbc44dea1e3dcb53cf286f52ac3133cfb96a14a979227b9d6459af57a975c5db8c800b99a93947
-
SSDEEP
3072:MVZWsblU2cVvL+nJ9qg6cCd3kOPg8nR8pxm4H1mV7131EX:MVZdUfv4p6B+gLR8fKV7131Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e901cbfbeca9c26ea2da4d210a137f2e_JaffaCakes118
Files
-
e901cbfbeca9c26ea2da4d210a137f2e_JaffaCakes118.dll windows:4 windows x86 arch:x86
aa6ae9e11ad8dea3c7bf26e2614091c3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetACP
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetCommandLineA
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 89B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE