iconv_module
Static task
static1
Behavioral task
behavioral1
Sample
fffa63f0b0259713fd34cdb3491180d3_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fffa63f0b0259713fd34cdb3491180d3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fffa63f0b0259713fd34cdb3491180d3_JaffaCakes118
-
Size
20KB
-
MD5
fffa63f0b0259713fd34cdb3491180d3
-
SHA1
bd90be37daa75b8ce7fd9ee411d321326e5cb215
-
SHA256
5a89e76c8ae5e506030715781d00a6bf0a19b9ed2aefd6bac8cbd487db321032
-
SHA512
25ec16566b42724e5c9d3813631c73faa0f671555f194126f0fa352aee9846e0fa6939ca3d7906dfca7669c323518ed9b13e8b97a82d7a44de8cc6dfb57220e6
-
SSDEEP
24:ev1GSoPCotmzDsyPEyPlSJ/V+7KUFtj4qG5ubIpHQ2ZHw9F6kajN3NdjvHer9VyQ:qoPsAyP4vkCLAIpHQUOUphNd8G+h9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fffa63f0b0259713fd34cdb3491180d3_JaffaCakes118
Files
-
fffa63f0b0259713fd34cdb3491180d3_JaffaCakes118.dll windows:4 windows x86 arch:x86
5cbcc4a2a3126fafa4b22f20c9441ec4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
libapriconv-1
apr_iconv_mod_noevent
msvcrt
free
_initterm
malloc
_adjust_fdiv
kernel32
DisableThreadLibraryCalls
Exports
Exports
Sections
.text Size: 4KB - Virtual size: 484B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 118B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ