Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_81b7e24b277f60f44f5098cca27fb004.dll
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_81b7e24b277f60f44f5098cca27fb004
-
Size
120KB
-
MD5
81b7e24b277f60f44f5098cca27fb004
-
SHA1
2f98fc8ba330183a5f2e3c700141168f63959693
-
SHA256
783d5fec332f73daaf8616c3b1e947acd83302c71790aa7a6162ca68c131e7c2
-
SHA512
4fb6e15ed8d8e6c63e145b92d94363373664416a8c94369ebc0a9375478830867bd80c58c26cd38a08dbb3c0b00b8e3cfac28f45f88858264480a008cdbe70e7
-
SSDEEP
1536:JS6RmzC34BdKPOBtegHZoTItDO8PV/ZSkAOIym1fzyvZYU773io7vkFo3r:JPAzC34L7oktKNkRiLyvZYU773iakO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_81b7e24b277f60f44f5098cca27fb004
Files
-
JaffaCakes118_81b7e24b277f60f44f5098cca27fb004.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ