Static task
static1
Behavioral task
behavioral1
Sample
66ef62c9a837471869d76234995b6e9c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
66ef62c9a837471869d76234995b6e9c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
66ef62c9a837471869d76234995b6e9c_JaffaCakes118
-
Size
977KB
-
MD5
66ef62c9a837471869d76234995b6e9c
-
SHA1
bbe2096c51b47564d71a6e33d683c44064c396c8
-
SHA256
f6e044aa31651cf2db4facb4092afce70136e15676186ef55bb7c1501c21e7b2
-
SHA512
2a78827f48adbf7225bdabf6b95b646fa8e05d26d6dcc223c0b0cc9692829729d2ccf0f2cb5021d2d74885e7f07f542dd093b88dfdbedbcebfa49433b208b400
-
SSDEEP
24576:6JF+isCXTiMClzACLvaR0/qxzd4wMXRbR0M6jcJhDFL:6H+ETLCNACD60Qzd4nRbN6jgvL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66ef62c9a837471869d76234995b6e9c_JaffaCakes118
Files
-
66ef62c9a837471869d76234995b6e9c_JaffaCakes118.dll windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 604KB - Virtual size: 608KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE