InstallALLHook
Static task
static1
Behavioral task
behavioral1
Sample
d42ed00ed40bab558b3c65b7c1021802_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d42ed00ed40bab558b3c65b7c1021802_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d42ed00ed40bab558b3c65b7c1021802_JaffaCakes118
-
Size
52KB
-
MD5
d42ed00ed40bab558b3c65b7c1021802
-
SHA1
081579615398bdb139c6f3522aee9f3a230c1fa3
-
SHA256
b4a43375161cff9309e3998ee2cb910ab387039766b92fa31205f71e5f8d7730
-
SHA512
65af6d82851be92b7fe46d2a95c30e00fc5b459ceae2feaa3b54f4c420c374cfecd33921455bd5ab8c65ff5d27f5ac0becee332e14a93d6ec3688eb2a65f8444
-
SSDEEP
768:7SnMqwlszX1jW15Nag1AVkl35UhG4d6sPvWUZFzbdN90cpQoZ7Z49/J6AwT3S3:OnMqwlsjmE035UhfWUZZLGc7ixJgg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d42ed00ed40bab558b3c65b7c1021802_JaffaCakes118
Files
-
d42ed00ed40bab558b3c65b7c1021802_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 75B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ