Static task
static1
Behavioral task
behavioral1
Sample
410f7a432e2fa815b9be81d158ca7604_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
410f7a432e2fa815b9be81d158ca7604_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
410f7a432e2fa815b9be81d158ca7604_JaffaCakes118
-
Size
527KB
-
MD5
410f7a432e2fa815b9be81d158ca7604
-
SHA1
1712c6b8e57e052774610c7c8d8533d9795dcd54
-
SHA256
16962ddab584822b136b776a94ea1c82e354aebc5924537d5372c7e3e7d40f24
-
SHA512
afcdb090a6afcecab498ac617b1e04bd61cc096a4f8d350a5bc9c00add18ff3dfa97e8f200d7995b1c4c110be4ef7c81a9dfa2088f2cddc4c8428888f995cd99
-
SSDEEP
12288:R07hKWpHtk1Z8DYz2+1SQNpVUlbQ8LYbSUvoeKDP/FHucjH:a9pHo8s1BpVUlGSUgeK7tpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 410f7a432e2fa815b9be81d158ca7604_JaffaCakes118
Files
-
410f7a432e2fa815b9be81d158ca7604_JaffaCakes118.dll windows:5 windows x86 arch:x86
6c8408bb5d7d5a5b75b9314f94e68763
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DisableThreadLibraryCalls
Sections
ldrhmocy Size: 7KB - Virtual size: 9.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nvpcmhjn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gycfgffq Size: 511KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
chojrnls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE