ms.pdb
Static task
static1
Behavioral task
behavioral1
Sample
67fd79a45442a10d1f6ce7995272945c_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
67fd79a45442a10d1f6ce7995272945c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
67fd79a45442a10d1f6ce7995272945c_JaffaCakes118
-
Size
93KB
-
MD5
67fd79a45442a10d1f6ce7995272945c
-
SHA1
0e8f5db261b2909bd4c6e0bfc426c4ae55ca7af8
-
SHA256
d289224024a7f43eecae860d8892c79be47b92503debbbf636af984c454674b8
-
SHA512
a176fd9b1596d8f3b5b62e5d40066a48503e0b12fb58df01199cc13ddefef6e1278816167042d3c61bfab5ad4e82fc4162a275a44fefc55517a347f1780270ad
-
SSDEEP
1536:PgYGu9A4vmtXkNjJKVCjVGQe490PcGtlOQwbR6ist:IYZ9YEJKVQX0BMmt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67fd79a45442a10d1f6ce7995272945c_JaffaCakes118
Files
-
67fd79a45442a10d1f6ce7995272945c_JaffaCakes118.dll windows:4 windows x86 arch:x86
7dc6eb9641e38fa82b2c6b2fbbd6fcf9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
MoveFileWithProgressA
FillConsoleOutputCharacterA
CreateTapePartition
Beep
Exports
Exports
vsukt
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 622B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ