Static task
static1
Behavioral task
behavioral1
Sample
4d244e85db998f42abd5a6e584ece1dc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d244e85db998f42abd5a6e584ece1dc_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4d244e85db998f42abd5a6e584ece1dc_JaffaCakes118
-
Size
145KB
-
MD5
4d244e85db998f42abd5a6e584ece1dc
-
SHA1
9ee1b6ba7357b4849b1c9ab48483e98332ed0bbc
-
SHA256
79edfe5ae87e2f89651d974598b90a8bba9f9e9569dfb45358057a5a124bf60f
-
SHA512
b6db7c9b7932ee4dd50a84d728e04567fea966704f4c6c87c06c25d62fc17368f2ed1b4c2e83421c4f50eb1ba278523ebcec83e034684f71a0fc63cb0c32badc
-
SSDEEP
3072:HVXUih+eOOwaWgtASJ7B2geExYC2yVu/ON5pOy+:HVXUy+N3aW2TB2FoYCBM/ON5v+
Malware Config
Signatures
Files
-
4d244e85db998f42abd5a6e584ece1dc_JaffaCakes118.dll windows:4 windows x86 arch:x86
Code Sign
5e:d5:f0:db:b1:64:ae:74:b1:98:87:f6:3f:0c:f7:d9Certificate
IssuerCN=Root AgencyNot Before07/08/2009, 18:39Not After31/12/2039, 23:59SubjectCN=DreamCaptialSigner
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ