InstallHook
Static task
static1
Behavioral task
behavioral1
Sample
dc47613be2e94d5c39909945e220a585_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dc47613be2e94d5c39909945e220a585_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dc47613be2e94d5c39909945e220a585_JaffaCakes118
-
Size
55KB
-
MD5
dc47613be2e94d5c39909945e220a585
-
SHA1
659275c7502ff28e6756c0a643114e6120419ae6
-
SHA256
7c8964e145b5c218226a6ff4964ef16409aca05534e7221f6f10d680be4565a6
-
SHA512
910548cc84ec1453adaf381773764b02ce531d47af793cbb8cf2d0203e11c21e325d2d9674bbb6612814380fda824993f1b24c0ce630353b33544681f1cd8609
-
SSDEEP
768:PqsrMzj5SOG4GNPYvJRmpDTwbuUEYVbD5dBkedjA83cCGkRrKTa0oSgFcgai1VBG:PJrMzNZGyBRuTwxrD5PLXDGkRr3Fz7hG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc47613be2e94d5c39909945e220a585_JaffaCakes118
Files
-
dc47613be2e94d5c39909945e220a585_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE