Static task
static1
Behavioral task
behavioral1
Sample
f747b4b1b0749074954e94158069893b_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f747b4b1b0749074954e94158069893b_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f747b4b1b0749074954e94158069893b_JaffaCakes118
-
Size
342KB
-
MD5
f747b4b1b0749074954e94158069893b
-
SHA1
6645456ec96efa056d27be6e9d56de5aa2dd3849
-
SHA256
9feac4c707a086fa7aa774fd9022ac01d6aa3b4f8e5492d2649d6e5774471350
-
SHA512
b515dfb9dfd022127114e6f0a28e485d7b48e74b5402de053999184eec9cd09e3b78e68627b31e3d975b41ec1cd3f592ed00fbd86fe37353016983cd7bd09ac3
-
SSDEEP
6144:E48FU+jfyj5ZyG9F+sm+BtIbrBcLeQs6Z9fK5G+EI/5gh3eHq9YkOzr:E4i7u5Zf6+BtuB5QsU9fd+EI/5Y3eqYJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f747b4b1b0749074954e94158069893b_JaffaCakes118
Files
-
f747b4b1b0749074954e94158069893b_JaffaCakes118.dll windows:4 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
Sections
.text Size: 320KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE