ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
708bc8204e61b14d547bb99d205c0749_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
708bc8204e61b14d547bb99d205c0749_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
708bc8204e61b14d547bb99d205c0749_JaffaCakes118
-
Size
97KB
-
MD5
708bc8204e61b14d547bb99d205c0749
-
SHA1
2dd0769a5c48eb73ae977067485ce5c007aeff53
-
SHA256
cdb42c76a9a04b59aa41ce3d52482bc5b9473d5d0afa4043cec1128d9a4d11a7
-
SHA512
0fa04a1c95970b199019c3ba89362f0531a835ee741c4daec34c7027fdb4bd2189a8200babccdb33a1d2081af244f052b46a14de80d526e2db51d0ca7c17147c
-
SSDEEP
1536:jhM6w2tDJzQSSW9dWu7k5aRIO2FnToIfXTAR:rJz2WL97Mc2tTBfXTAR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 708bc8204e61b14d547bb99d205c0749_JaffaCakes118
Files
-
708bc8204e61b14d547bb99d205c0749_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 220B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ