CreateObject
Static task
static1
Behavioral task
behavioral1
Sample
f2c8e32321f1e2e2a616d92ffe56d30f_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f2c8e32321f1e2e2a616d92ffe56d30f_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f2c8e32321f1e2e2a616d92ffe56d30f_JaffaCakes118
-
Size
314KB
-
MD5
f2c8e32321f1e2e2a616d92ffe56d30f
-
SHA1
357b32bd2a6aa53a1980c92d3ba289c7dfe36263
-
SHA256
241833bbb498a5d53f9333978c890d147b22da9744fa47135ea4e1b3ddca81d5
-
SHA512
6c8292813288e5c0173048a3d467c3397de4136ccb33f30a21c6a68ce5b25d50efd72ad245e47aa1fb797cc4ca7c9cf3cf3262bdce7b1833ba0607414b4e2182
-
SSDEEP
6144:DPcre8q3mijLipaAcw9DI3LERp+j4XmAl+vnU8zBVWU:DPl8Wm+sqwL+ffvBgU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2c8e32321f1e2e2a616d92ffe56d30f_JaffaCakes118
Files
-
f2c8e32321f1e2e2a616d92ffe56d30f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.weiwen0 Size: - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.weiwen1 Size: 313KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.weiwen2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE