Static task
static1
Behavioral task
behavioral1
Sample
be38654b887d5f94f1867f04f0409369_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
be38654b887d5f94f1867f04f0409369_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
be38654b887d5f94f1867f04f0409369_JaffaCakes118
-
Size
102KB
-
MD5
be38654b887d5f94f1867f04f0409369
-
SHA1
3b9917232d924e4bdd032f7f4d0c9fbd893d2c92
-
SHA256
579cf7357076f9a7471f6aceb6e7dfa6316349cdc2f7a38060c8b0a5dc211d89
-
SHA512
d66440ee38eed9799b1ad0fff636e65b510db17c84c4a928ccfd5e545a78264aad54de2e9bae4647b42cf9e785d726bcceea429b8fb4e7d0ca7532e15f66b08a
-
SSDEEP
1536:dK7R+97tZ2XN7Iq7L3TyVM/aDdIEH/1VPMThiAkhneYMPdkri93+QihJMaoxiV/G:dR3lK/QdrMTyfMPdkriDihexu/rC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be38654b887d5f94f1867f04f0409369_JaffaCakes118
Files
-
be38654b887d5f94f1867f04f0409369_JaffaCakes118.dll windows:4 windows x86 arch:x86
2a266458d2d0a8e28051914060dc9844
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
FlushFileBuffers
GetCommandLineA
GetDateFormatA
GetSystemTimeAsFileTime
SetEndOfFile
Sleep
TlsSetValue
lstrcmpiA
Sections
.text Size: 25KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ