COMResModuleInstance
Static task
static1
Behavioral task
behavioral1
Sample
0988a98803d137d8d2d8aa3383c8329e_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0988a98803d137d8d2d8aa3383c8329e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0988a98803d137d8d2d8aa3383c8329e_JaffaCakes118
-
Size
137KB
-
MD5
0988a98803d137d8d2d8aa3383c8329e
-
SHA1
2c0533f82edf691314cc4c7995da966fe0c56e96
-
SHA256
02bee614085c5bdd243290dcef2f958ab48ff473c9b71afb9276842dfacc760c
-
SHA512
d1af3870326413072f494af0118602af1c87d2b90fb8dbd5a673a238628811273e3d1953bafec91feff869af78970e0f183b7b922dafce9e67f7db95dbf93f9f
-
SSDEEP
3072:e4nDbfagCqKZk5yY/FroOFyuz4GIGqNPdQ7YpmH7zwb8WSAojcKDyO3:e4nDWgRAkPFrov+dH7UacKeG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0988a98803d137d8d2d8aa3383c8329e_JaffaCakes118
Files
-
0988a98803d137d8d2d8aa3383c8329e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.textbss Size: - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 887B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 82B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 980B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ