Static task
static1
Behavioral task
behavioral1
Sample
5e40a552279d1599bd078e5ffcd15017_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5e40a552279d1599bd078e5ffcd15017_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5e40a552279d1599bd078e5ffcd15017_JaffaCakes118
-
Size
274KB
-
MD5
5e40a552279d1599bd078e5ffcd15017
-
SHA1
e8870a18b4d97a2250435b087a2a14d53938d1c2
-
SHA256
0ee2fc134f2b96d2500f54ff6d47da7871e9c1ab7e3f39c210b0142c6c1fc250
-
SHA512
e363682367ef6d86ed028efc885b2c9d5d75eee8d424fa8a3318d0eec14f11992e9d28ee578d335e723232ec583afa0e9ac880abbf148a480afd60aeb3d4e406
-
SSDEEP
6144:gPqXUfJY+djgdwfd6gF9s/buN0tOdQpu+e8LzVqzDs:gPPdjhfd6iKaGtOdQp1zQzY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e40a552279d1599bd078e5ffcd15017_JaffaCakes118
Files
-
5e40a552279d1599bd078e5ffcd15017_JaffaCakes118.dll windows:4 windows x86 arch:x86
5c695ba08bc2fe7819b034020c6dfdf3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCommandLineA
GetDateFormatA
OpenFile
SetCurrentDirectoryA
UnmapViewOfFile
lstrcpynA
ExitProcess
Sections
.sforce3 Size: 25KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RDATA Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sforce3 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.brick Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ