ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
37e650119b302b35edf6c78b6de476ed_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37e650119b302b35edf6c78b6de476ed_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
37e650119b302b35edf6c78b6de476ed_JaffaCakes118
-
Size
144KB
-
MD5
37e650119b302b35edf6c78b6de476ed
-
SHA1
d075cbf9132c4b0b183ccea65df85a23f637b853
-
SHA256
ba9fba9e32a2a2c5d32eaeb2241de19771a750ca5b4a2049e22561fff712ecc0
-
SHA512
64a575fac2f28b1e0c051c130a8d818c42900904f9ece3e2370260952f1e98f0b72b13cb1ad184a67360cf74f1dd0a3410621e14c4e1850c72ad4bf34c76b687
-
SSDEEP
3072:IlUyljJ68Ax3f0XhLjUm0rwATBfVnRRh:Iyys3f0xLsxTBdnRR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37e650119b302b35edf6c78b6de476ed_JaffaCakes118
Files
-
37e650119b302b35edf6c78b6de476ed_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 71B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ