Static task
static1
Behavioral task
behavioral1
Sample
6394a3343b175e23a0f4593f4e98885a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6394a3343b175e23a0f4593f4e98885a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6394a3343b175e23a0f4593f4e98885a_JaffaCakes118
-
Size
1.0MB
-
MD5
6394a3343b175e23a0f4593f4e98885a
-
SHA1
798ae19005cb246a399d18b21f2e3b5cf81d7ba2
-
SHA256
0f8909fddca412fe5c9da0514ba741566b1b699e766a10bf6187a5060f337855
-
SHA512
b4a94264ac012bd02e6c3381ba5bd59b0f70469a49d8f4fd40f2e44937c07c26d7f78d45c20e87545464a3df1b898d72307afd358b698723b6197708bfe487c7
-
SSDEEP
12288:6+GN+SVb4+YdZUz8uF6FqPaIJ0KgtbL0ujnr32LJ/Xk/QRLb1u1I6:veYdSzRQFqPTJ0Ptn32tk/Gbg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6394a3343b175e23a0f4593f4e98885a_JaffaCakes118
Files
-
6394a3343b175e23a0f4593f4e98885a_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEPack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xpr01 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE