ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
717c367395060c6504c137c92b8b8765_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
717c367395060c6504c137c92b8b8765_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
717c367395060c6504c137c92b8b8765_JaffaCakes118
-
Size
76KB
-
MD5
717c367395060c6504c137c92b8b8765
-
SHA1
2d69da921223e558ddbb9d408b95f5418f185d80
-
SHA256
7f22a7db92a8a8f2a1a0da6af9b4c563fbe5c14166786cb8f8732ea6c957b540
-
SHA512
0c48a211e70bfb9ec9a78da29ba298bce256890759486fd7c4d896bb6a236e66d898abc34327d355d3dc764503b9ef1cd6990628436f4b058d3956338370fd5a
-
SSDEEP
1536:pa2kL72dQtKX8hX1vt52gbCk0RQ8uQzA4957VptcTLR0aJaWnByPp9ExfIueFwan:pQLJX1vtIuC48uAz957Vp0R0oaWnCexY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 717c367395060c6504c137c92b8b8765_JaffaCakes118
Files
-
717c367395060c6504c137c92b8b8765_JaffaCakes118.dll windows:4 windows x86 arch:x86
b5612e99c648c99574f8ebc51bb2ee42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
Exports
Exports
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 219B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ