MainProc
Static task
static1
Behavioral task
behavioral1
Sample
268a67ccc530415682131049c64af571_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
268a67ccc530415682131049c64af571_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
268a67ccc530415682131049c64af571_JaffaCakes118
-
Size
912KB
-
MD5
268a67ccc530415682131049c64af571
-
SHA1
eb6e8da652ff50fe7e3d186f60ec1e0917105925
-
SHA256
95a4f88f2cab0acfd36dbea29bdfded4a536d492af8f3a79cb7a6d6d9cd5b891
-
SHA512
fc5f968b30cfadbbbea474af4a12f4d3f456fefcc92a9769cb0e1e5422b62c15d12a439d8670842ce819cf3393d7150a21788a8e9c17ac1a68b441706a4e0fe6
-
SSDEEP
24576:nCSG1W4pZSm3DcS8RUxTXYUG+JDVeCFTMvJp5Hr:nCfW4pHwS8CxjY50ZeCqvJph
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 268a67ccc530415682131049c64af571_JaffaCakes118
Files
-
268a67ccc530415682131049c64af571_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tls Size: 898KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE