Static task
static1
Behavioral task
behavioral1
Sample
41e98010af8fed1315d98511db8ac93c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
41e98010af8fed1315d98511db8ac93c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
41e98010af8fed1315d98511db8ac93c_JaffaCakes118
-
Size
102KB
-
MD5
41e98010af8fed1315d98511db8ac93c
-
SHA1
dcd4cffea6854fa75e2ef424455b754401f1bfea
-
SHA256
32e4dcab181b882a658b0802372f6c460a67891b099d8e30caf3842114a8e0e4
-
SHA512
82675fa1c5b4484ed406fa7fdbd07c527890fdc4a74fc7ba5080c430d214c9a6adae54add993fa1f4285871822210bf32ae3c782b180b8160971f5c52e4dfd81
-
SSDEEP
3072:EOT8Fai47cFkmN+93En15Q0EasTZW9aA9z7gB1:EOT6ai4e+9o15qbTZLB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e98010af8fed1315d98511db8ac93c_JaffaCakes118
Files
-
41e98010af8fed1315d98511db8ac93c_JaffaCakes118.dll windows:4 windows x86 arch:x86
50f0a056193a1df4a4ec155eee6947e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindResourceA
GetSystemTimeAsFileTime
TlsAlloc
VirtualAlloc
ExitProcess
Sections
.sforce3 Size: 23KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RDATA Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sforce3 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.brick Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ