Static task
static1
Behavioral task
behavioral1
Sample
3e7748a799dcde5a0720c1cfab5149e7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3e7748a799dcde5a0720c1cfab5149e7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
3e7748a799dcde5a0720c1cfab5149e7_JaffaCakes118
-
Size
100KB
-
MD5
3e7748a799dcde5a0720c1cfab5149e7
-
SHA1
59a35689c1d8b9f3b5540e5d7367820fb65721ec
-
SHA256
30ee7b1dcc1bace462632287dee04106d90eefa00f65d8cfb05f0eb227bd3f7c
-
SHA512
0fcb11a4a43c9738e62b670cc320a3707b2a834129328d0b7616909a6f37167f80f388e82875b68900208da52ad24e11e32e989307e303f3067ebcc3d7f142b3
-
SSDEEP
1536:voJmO9jqGvoMFo2mfM5CjPQ0fEMNVsAqcM7IjV6BTfAxKXaL:voJmO9GGg/lfjjIrtAqvQV6BTfWKX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e7748a799dcde5a0720c1cfab5149e7_JaffaCakes118
Files
-
3e7748a799dcde5a0720c1cfab5149e7_JaffaCakes118.dll windows:4 windows x86 arch:x86
196ce5831c453533b2e474f95d06062e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
IsBadWritePtr
CreateTimerQueue
SetConsoleOS2OemFormat
TlsAlloc
FileTimeToDosDateTime
ReadFile
LeaveCriticalSection
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ