___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
feea02bc6834b0a2a87d1a83adb1f34a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
feea02bc6834b0a2a87d1a83adb1f34a_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
feea02bc6834b0a2a87d1a83adb1f34a_JaffaCakes118
-
Size
168KB
-
MD5
feea02bc6834b0a2a87d1a83adb1f34a
-
SHA1
c504cc0743ad6c6144d1704cd3fbd18c8f4b7395
-
SHA256
910ae7c3ffe1dbe8d3b6af9bd9dd85ab1dc266284e9811435b05f53da9fedde1
-
SHA512
3ec54ccdfe7c9adfb4304d7ac1fafd5a66d5aacf60079a7aec621faa317978a619ec64937211d94095111c7b43a9aae7daa8417f43601a02b90ea664b2ef2a54
-
SSDEEP
3072:t3DijZrj2nNzXEI3QGLlShuhDiTUCQcQFDpYs3up2nCgn:pDi5ODEoQGLcIB2UCQcKYE1R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feea02bc6834b0a2a87d1a83adb1f34a_JaffaCakes118
Files
-
feea02bc6834b0a2a87d1a83adb1f34a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 136KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ