ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
49f9f369aa1f6b0bcf2fc7a53ebdc1cf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49f9f369aa1f6b0bcf2fc7a53ebdc1cf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
49f9f369aa1f6b0bcf2fc7a53ebdc1cf_JaffaCakes118
-
Size
97KB
-
MD5
49f9f369aa1f6b0bcf2fc7a53ebdc1cf
-
SHA1
6e88d3503d98f9577a7d9344b52ad7b20b6529d7
-
SHA256
dfd31f46693e7fce9fa3ee6ed8cd51fc8ce30ed0ce35275024a013fddfa05aa0
-
SHA512
5782c0122a7c2cf3a62cd1785455168312797d3c2d35473a3811735232f324976e7cc8146d8e470f1829f93af2be5861f6aac646b5317f5f5674bb12b1c40429
-
SSDEEP
1536:/iM6w2tDJzQSSWbdWu7k57IIO2FnToIfGTA1:qJz2WR97Mq2tTBfGTA1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 49f9f369aa1f6b0bcf2fc7a53ebdc1cf_JaffaCakes118
Files
-
49f9f369aa1f6b0bcf2fc7a53ebdc1cf_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ