Static task
static1
Behavioral task
behavioral1
Sample
5d47259e586aba773147925f851d9d5d_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5d47259e586aba773147925f851d9d5d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5d47259e586aba773147925f851d9d5d_JaffaCakes118
-
Size
21KB
-
MD5
5d47259e586aba773147925f851d9d5d
-
SHA1
d58a1be1a3b569ef0c87aafd4b0237a97cf322c2
-
SHA256
f7caece77e5c66a1481afa3da77760b8fad02938cf3825a8931d12d2854cb4d8
-
SHA512
ef004a88d5d269d09f7ee7fa72c9cd9b5c3cccce9dff16b2fa4a922d7380b17f7ad7c34b65239dd0a142dc72c0ec059fdb9bd996ff409ee43eb14f44e868a8ab
-
SSDEEP
192:VX070z+EuVXQB3/SEvtmUGcmGBL0QyRXyJz19jVeMELdnJs2OPrgFm+lR1tm0RoG:NuKU1Q9SrGBgQyw1OLLWMFm+hsGoG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d47259e586aba773147925f851d9d5d_JaffaCakes118
Files
-
5d47259e586aba773147925f851d9d5d_JaffaCakes118.dll windows:4 windows x86 arch:x86
a03c7e19e9e1f3598d27ba2cb8ce83f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FindNextFileW
GetLastError
user32
GetDC
Sections
.text Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rrtppp Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 169B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE