Static task
static1
Behavioral task
behavioral1
Sample
844cc089813e8c869a520f6bfdff61c2_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
844cc089813e8c869a520f6bfdff61c2_JaffaCakes118
-
Size
548KB
-
MD5
844cc089813e8c869a520f6bfdff61c2
-
SHA1
3255d9a47fdc0506781e0cf19792de7879c79df4
-
SHA256
f1418986015a29da0fd66bcf7e984fdc44e92d0aca1d178f38f0e73edf7d5feb
-
SHA512
54a2819b87bda078b9c8dd3777e1f23465b77a0046f9075704bbe790bc7c22013704e9cce079422a3d5d6801cf344035f400d4aa0db3b6dc17d8f7cc76edd74b
-
SSDEEP
6144:yJPIkU38MBL8O2m3JtHbFmD/vnDhi6F7f8izHQFz/bUffEsItXXDshqE6/iB5MeE:yS812NmD3DM83qX2qE6UEadL0v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 844cc089813e8c869a520f6bfdff61c2_JaffaCakes118
Files
-
844cc089813e8c869a520f6bfdff61c2_JaffaCakes118.dll windows:5 windows x86 arch:x86
e0066764cfdda6b7954ef42590c8a37d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TerminateProcess
Sections
Size: 53KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wqlajlyq Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmolcyab Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE