Static task
static1
Behavioral task
behavioral1
Sample
de4283089ee0a271762fcc14fadfd546_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
de4283089ee0a271762fcc14fadfd546_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
de4283089ee0a271762fcc14fadfd546_JaffaCakes118
-
Size
270KB
-
MD5
de4283089ee0a271762fcc14fadfd546
-
SHA1
2ee7c5faeb063bfb68752a4e5bf8ae5ebd80ff1f
-
SHA256
8da9f3b05e43879276f5c011dbcf2513a0cc9db6f3a0402c582397d3af92db29
-
SHA512
d9b6abfed845df1842f9d19c16cd9cf97dd05f12884d9f278fbd2c94166853f43f583004fbbb9125c58b72aae812bf70d216939ddcf7197e0955846d6722963d
-
SSDEEP
6144:HmhHg2VsOmMVz98OzyzPkEwhQvJCoN4og1lN7ooshQ3RpN:AA2VsOmMV58O4PkEwCgoN4okNEoshQTN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de4283089ee0a271762fcc14fadfd546_JaffaCakes118
Files
-
de4283089ee0a271762fcc14fadfd546_JaffaCakes118.dll windows:4 windows x86 arch:x86
5294100eb7b9e82fcef3bcaea36abfca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
FlushFileBuffers
GetLocalTime
LeaveCriticalSection
ReadFile
Sleep
EnterCriticalSection
Sections
.text Size: 22KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 243KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ