ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
416f77ae6a255cf9149b452275bf2416_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
416f77ae6a255cf9149b452275bf2416_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
416f77ae6a255cf9149b452275bf2416_JaffaCakes118
-
Size
52KB
-
MD5
416f77ae6a255cf9149b452275bf2416
-
SHA1
feefbaa1c68bcdabb39f9429eb81359a05fade5c
-
SHA256
70c3f28ac7f3cde1a66a38c1e9813d4ee6bbad583e8d9e966e132cf31c0f591a
-
SHA512
9d8ab9fa64fd5e9a4d23ad8532394ac3f8801a196f423ce36e81ac4222dc4eddff1ae06a57759efb7d8749b4524f2a7f8811021df59b37efa46a9abb806d3848
-
SSDEEP
768:KPGlsKeuy00sjoY1BwvH8QZOYr0XOpxUxhSEX9urW2b3LINxm5ElBiWGqopm:KeeNjZwVwvHZOYrmtQW6ISWh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 416f77ae6a255cf9149b452275bf2416_JaffaCakes118
Files
-
416f77ae6a255cf9149b452275bf2416_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
.Upack Size: - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE