Static task
static1
Behavioral task
behavioral1
Sample
f42258b6da5d309919a8f82b39d383ab_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f42258b6da5d309919a8f82b39d383ab_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f42258b6da5d309919a8f82b39d383ab_JaffaCakes118
-
Size
10KB
-
MD5
f42258b6da5d309919a8f82b39d383ab
-
SHA1
df730ce14bf21ddf52be346c591621b02ce8af36
-
SHA256
f3bd807548d970945c0487374b005788c05866348a78009e47b3d5970053b224
-
SHA512
33312db75894d96d6ac9d26f048528aaadd84fff46a8276fe101edf137983b812dcc4116978cbc80de622ae300889a8ecd3bd84ab3dbb757aaca537453b0a0bb
-
SSDEEP
96:3rzYSfIwlmpP45VTIfIWJOvymF2a8gl5R88sX5x:ICG4rTIfIWtmYa8gf8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f42258b6da5d309919a8f82b39d383ab_JaffaCakes118
Files
-
f42258b6da5d309919a8f82b39d383ab_JaffaCakes118.dll windows:6 windows x64 arch:x64
c931aae30bce43db062829aea7b11939
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
ntdll
RtlSetLastWin32Error
NtTerminateProcess
RtlInitUnicodeString
RtlNtStatusToDosError
NtClose
DbgPrint
RtlExpandEnvironmentStrings_U
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 702B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ