Static task
static1
Behavioral task
behavioral1
Sample
6482d8cab34ccc9db04fad4e94e51e8a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6482d8cab34ccc9db04fad4e94e51e8a_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6482d8cab34ccc9db04fad4e94e51e8a_JaffaCakes118
-
Size
1.5MB
-
MD5
6482d8cab34ccc9db04fad4e94e51e8a
-
SHA1
c133845ff66016d4aa47179d420fb444a378bccf
-
SHA256
015a5df9acb20a5fd7ad758f99b42514706a076865db95961a0e0ac0e0459351
-
SHA512
5b8d297be39429d48b9286ad54a486f2b858918e79245a3ab88c1ca6f1fd0187fb4409f4926e54479bc5c342901c384f26f85dd4fd58e259dc85282f0c0ab9a3
-
SSDEEP
24576:tm6epFmphTr6K/v3wv1iwnE2SHchadkKyxo7KEBfbJ/JOyUY:tgmphTu4v3wv1pE2S8UdkvWB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6482d8cab34ccc9db04fad4e94e51e8a_JaffaCakes118
Files
-
6482d8cab34ccc9db04fad4e94e51e8a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.meyrs Size: - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gewuz Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sywa Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pfsxrm Size: - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifse Size: - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.njzk Size: - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zurg Size: - Virtual size: 15B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.mlgd Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rtsxo Size: 476KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kluco Size: 52KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ghmw Size: 88KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cmyiub Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.wogh Size: 860KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.scner Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ