Static task
static1
Behavioral task
behavioral1
Sample
9fd2a1e40d554d0fe965546f65ab7e7d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9fd2a1e40d554d0fe965546f65ab7e7d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
9fd2a1e40d554d0fe965546f65ab7e7d_JaffaCakes118
-
Size
682KB
-
MD5
9fd2a1e40d554d0fe965546f65ab7e7d
-
SHA1
be5b100eba4d0341b43074180d1a6b6b7ef32cb8
-
SHA256
ff17f15b8ae330363413b4560511c0bee71a5a8d62eef8efb6787c822e9a7d0d
-
SHA512
3679f3331de6b6dde3801a5fe2f9b4c65afcb21aef10811ad17e6cc6b51d9a9a78738e8131cc6dec4e480c10fc70d71b2b62cfedd9a49ce1c1eef746c9b9fdf2
-
SSDEEP
6144:+TToa5gQYgReBeNevUZSzczlXMjsHwGWarDvX6j:+TTombR+eIkXM0JBvW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fd2a1e40d554d0fe965546f65ab7e7d_JaffaCakes118
Files
-
9fd2a1e40d554d0fe965546f65ab7e7d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
xiaohui0 Size: - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui1 Size: 269KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE