Static task
static1
Behavioral task
behavioral1
Sample
4691ddc9cd9de8b13858aa5cf10bfcef_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4691ddc9cd9de8b13858aa5cf10bfcef_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4691ddc9cd9de8b13858aa5cf10bfcef_JaffaCakes118
-
Size
96KB
-
MD5
4691ddc9cd9de8b13858aa5cf10bfcef
-
SHA1
82a66e1df913f7bbf4d25d4ca3311fa7752d811d
-
SHA256
32fb14a39b193f2804dcd700ea01d360f3f2534c27658a8eb01ee419a92a3445
-
SHA512
f5d08240939ceb11df56bf67984b02865fb782927c102d7bafbbc318398a34204698421ec88156a115df4ac4610ed3243c920ec4fcd2b11bd34f50c098a4bbbc
-
SSDEEP
1536:W9thWJcgC6IxKOocuI/JqLM0vmeCg424tHOhr/nESpxyoYMfb6JfXnrvvtKy+vvl:WDhWnLoaqJqLMbR248px2o6JPztgl
Malware Config
Signatures
Files
-
4691ddc9cd9de8b13858aa5cf10bfcef_JaffaCakes118.dll windows:4 windows x86 arch:x86
Code Sign
a7:bf:06:3e:b2:c4:15:b8:25:d5:dc:7e:f1:15:96:fd:0a:09:9e:bdSigner
Actual PE Digesta7:bf:06:3e:b2:c4:15:b8:25:d5:dc:7e:f1:15:96:fd:0a:09:9e:bdDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
DoMainWork
DoService
ServiceMain
Sections
.miss Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dosdt Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bbsd Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.musd Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.smdaa Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.Neroxps Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE