Static task
static1
Behavioral task
behavioral1
Sample
07ff97b973f217b9182721f0a0a1e1b3_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07ff97b973f217b9182721f0a0a1e1b3_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
07ff97b973f217b9182721f0a0a1e1b3_JaffaCakes118
-
Size
1.3MB
-
MD5
07ff97b973f217b9182721f0a0a1e1b3
-
SHA1
8f4ece60b92aa485a9daa1a09509fb647aa4f7ec
-
SHA256
10f6d7b0a59689f61d714b918f562f0d272677e0c1894ecdc7d50ddee87edafa
-
SHA512
88a5113f6a1724bc1988d822c5061c3a2d53f7a6843dc372d257d0af9ebdc61e245108426c3a19e901b82cd09473eca88ee1333b69ae8a85e8a6514c3d6b5dff
-
SSDEEP
24576:cfORqPopMc7UlVwg52cJJOdH1F/vE7fgUf9IgJqnqCOeJtb:+SMcMh52cOdHn/vf0JLo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07ff97b973f217b9182721f0a0a1e1b3_JaffaCakes118
Files
-
07ff97b973f217b9182721f0a0a1e1b3_JaffaCakes118.dll windows:4 windows x86 arch:x86
58e683abec29a387daf56221678b4318
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ReadFile
Sections
Size: 46KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pmimumre Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jgfwloqp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE