����0��
Static task
static1
Behavioral task
behavioral1
Sample
49c3fd1543cda978d262c861c2fc0864_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49c3fd1543cda978d262c861c2fc0864_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
49c3fd1543cda978d262c861c2fc0864_JaffaCakes118
-
Size
1.5MB
-
MD5
49c3fd1543cda978d262c861c2fc0864
-
SHA1
6a351c21a6cf70bae30d1e20e8d50c9335971d1b
-
SHA256
f6e102f5d211614ea5b9cbf1e3467362c460adcf1ef10816e7d452ed99e8ccfe
-
SHA512
84a46ebc4d812a0dd382d506240e8c6f01f7987067c309c33ef342e95e2092d93d3046da7b76eeb2e22c59d94a66424d6243ec46fbc883d7ecb2bdd6a131ddef
-
SSDEEP
24576:n/7EwVYrIy7uAaoCAK93N99bpKxO44P96TTneANjbTZXGgA0IQRtIQpC5vt:n/4wfyqwITpL0emtFPtqQp81
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49c3fd1543cda978d262c861c2fc0864_JaffaCakes118
Files
-
49c3fd1543cda978d262c861c2fc0864_JaffaCakes118.dll windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 304KB - Virtual size: 816KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
etnhrdbt Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
twspbedq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE