Static task
static1
Behavioral task
behavioral1
Sample
d39c0d7fee560fefc9b5aec9f1cc5cfe_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d39c0d7fee560fefc9b5aec9f1cc5cfe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d39c0d7fee560fefc9b5aec9f1cc5cfe_JaffaCakes118
-
Size
269KB
-
MD5
d39c0d7fee560fefc9b5aec9f1cc5cfe
-
SHA1
4532329da7c91961bfc4788821b9164a559e5489
-
SHA256
fbc9377dbfd3323b4e9e6b8fa488ed4d1d16bbcdb5656a995f1d5489fe466934
-
SHA512
ac9487ec607f9ae98cbe3905b1bdbbc0a5c67e3cccf6f2b08c3a107111c0415b45b0b8f69a829c5efb2e45f957a63990ed53ab69552c6503fcfc0f04601e2348
-
SSDEEP
6144:82Kp62bD8DQ8SF97fAPS+G0h6oMTsOdHBOR6EsJLYl+mlG:RW/8u9064ttoHBO6EMLYl+mlG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d39c0d7fee560fefc9b5aec9f1cc5cfe_JaffaCakes118
Files
-
d39c0d7fee560fefc9b5aec9f1cc5cfe_JaffaCakes118.dll windows:4 windows x86 arch:x86
5f91c393f5511fd31bf17fa6f66ece0d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetSystemTimeAsFileTime
GetVersion
LocalAlloc
RtlUnwind
TlsSetValue
EnumResourceLanguagesW
Sections
.text Size: 21KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ