ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
256291c0808c97b6661828875e1d404f_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
256291c0808c97b6661828875e1d404f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
256291c0808c97b6661828875e1d404f_JaffaCakes118
-
Size
22KB
-
MD5
256291c0808c97b6661828875e1d404f
-
SHA1
402fcf64ab2e20ede83dbf0e8aacc1b97e0b9d6f
-
SHA256
87db646e1a5f51719b2be950b9763835f484b42624dc94255fdc49d1edb6bcf1
-
SHA512
70fcc57069dd22240d8817f51dabaade6d35a7e69f66332d0647304ad77111a33b5122235c3ea6f39f37faa5fc55620e9a08bb4d340d6d4ebcc8ee3f1696eee9
-
SSDEEP
384:h6uR4KMS9eEQXRLAIWLNKfH83ygUtbkfCVIBuFlkwBScJv8J:b4jBEQBWNKU32b+wuuFhBScJv8J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256291c0808c97b6661828875e1d404f_JaffaCakes118
Files
-
256291c0808c97b6661828875e1d404f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
ADE120 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ADE121 Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ADE122 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ADE123 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ADE124 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE