Static task
static1
Behavioral task
behavioral1
Sample
646fd8dc41b8768eec147ed9fa2ac774_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
646fd8dc41b8768eec147ed9fa2ac774_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
646fd8dc41b8768eec147ed9fa2ac774_JaffaCakes118
-
Size
327KB
-
MD5
646fd8dc41b8768eec147ed9fa2ac774
-
SHA1
948fd04bb9890913974b9c7a9ec09b7e9a14ed0c
-
SHA256
38fe1413465e96fed1d5adc88f00574069c1f288f21dee020e081f3fabeac90d
-
SHA512
66df5f7ecd5fb43e29977f4afae8876f88b2602c882dc9c619cf16e362da6cd2065f3d49963d2cec1f7b6c42290f07392e3621d145da529e32dde35595bbee36
-
SSDEEP
6144:ZpLSOqUHXvz3QIHj7+sx5uyw3AcYw/p+ibKEbp88Hvjoul4fYCbTP8kyXk5ldWJi:ZdEUHXjQIHj7/5cYw/pUq88HLyAC3RTL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 646fd8dc41b8768eec147ed9fa2ac774_JaffaCakes118
Files
-
646fd8dc41b8768eec147ed9fa2ac774_JaffaCakes118.dll windows:4 windows x86 arch:x86
8d7c8a2e7d5aee98626a0dbeb41cdddb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
LoadLibraryA
user32
DispatchMessageA
Sections
.text Size: 326KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE