tanlt88
Static task
static1
Behavioral task
behavioral1
Sample
4c9c2f572bc41b146ede0ed4d8610470_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4c9c2f572bc41b146ede0ed4d8610470_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4c9c2f572bc41b146ede0ed4d8610470_JaffaCakes118
-
Size
31KB
-
MD5
4c9c2f572bc41b146ede0ed4d8610470
-
SHA1
ec5ea60990b0a33f109797715a4ab406193e409b
-
SHA256
f796b4f1a4b2de52516e484baff6f00a4e3ee0cce8d57875f678785ca7095f78
-
SHA512
60179447e2c59a456b4bdecab0185834aaffd6ac0410f07dfbda0d66adf3c2c4e31b1ad579f7e2159ca3ffaca95697308794fc6e9cf5b112f6ed4aea7e48d647
-
SSDEEP
768:7SACC8VIS63U2ICm9vi8DINavg4abGLg0:7SAmpCyvi0IN15
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c9c2f572bc41b146ede0ed4d8610470_JaffaCakes118
Files
-
4c9c2f572bc41b146ede0ed4d8610470_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ