Static task
static1
Behavioral task
behavioral1
Sample
af89043e4db0768bc836199cd43885eb_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
af89043e4db0768bc836199cd43885eb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
af89043e4db0768bc836199cd43885eb_JaffaCakes118
-
Size
137KB
-
MD5
af89043e4db0768bc836199cd43885eb
-
SHA1
8510c8262c885c65de86edf93b4073a45a641f58
-
SHA256
e3e6f1ef7a38a68a6bed554ea1b73c837072796371c478877b3892cdebb9a4e8
-
SHA512
40c57fd9d096bb1e698fc2fd6681ae63619f464e4097923ff5ff253221772ff1c1973ee8ef54b5a71f7fd9c3bad7e9ed2a29f37b9a81401746da3b7ea31be28e
-
SSDEEP
3072:W6nXKMQc3vI2mVNQtWr7cEcnLLbvbl7XARitA:W3MV3VF5LbzGaA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af89043e4db0768bc836199cd43885eb_JaffaCakes118
Files
-
af89043e4db0768bc836199cd43885eb_JaffaCakes118.dll windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 135KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE