ServiceMain
Static task
static1
Behavioral task
behavioral1
Sample
dba0469e27cd88ce57badb7953d7cf47_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dba0469e27cd88ce57badb7953d7cf47_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dba0469e27cd88ce57badb7953d7cf47_JaffaCakes118
-
Size
357KB
-
MD5
dba0469e27cd88ce57badb7953d7cf47
-
SHA1
1af225b0dcf988b37718dad4404e2e409e560548
-
SHA256
63595e3fd1734a7df0cbd22ce880358a40b6b8b652e0486d5b9bea080c8e8265
-
SHA512
ab206d7eb875b3f2334efdc3db0d0719df0bb2f683334f0c5dd3e3ce6fd48b3fb009d40093f129c716eb92d00a52fcc987b548f40e8fcbc9c04597305675637b
-
SSDEEP
6144:gJ9Mnxq9E4xiHUC8bGQY0YJvx8j6v9oaJoKPZ6LZmV4DrijTBjS:TnsE4sHUHGQY0YszKPo8V4DrijTc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dba0469e27cd88ce57badb7953d7cf47_JaffaCakes118
Files
-
dba0469e27cd88ce57badb7953d7cf47_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
CODE Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 73B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ