ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
1917432a3c557202eb60f6346f71d3ec_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1917432a3c557202eb60f6346f71d3ec_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1917432a3c557202eb60f6346f71d3ec_JaffaCakes118
-
Size
126KB
-
MD5
1917432a3c557202eb60f6346f71d3ec
-
SHA1
0005e4e714ebf65a7a968f3f901e802bb19f5d19
-
SHA256
68521060d5d0f199936693c538c96ef8c29397c162ad50a7419c7d314b1c07f5
-
SHA512
d80001fa8bb5c0be381741c32965d4cf93de6ad27795bfbe16e2accc5b7b5d70697d15c92854ff765b66aeb5ed6209ce63f049044f3ec26f34e4ef62bc89cbfc
-
SSDEEP
3072:5/6NeEi2OFr39PLzzmQ2Z/iBpIKMikSTaY63aS:F6sXtXzIZMiKM/SuDaS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1917432a3c557202eb60f6346f71d3ec_JaffaCakes118
Files
-
1917432a3c557202eb60f6346f71d3ec_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE