ToDo
Static task
static1
Behavioral task
behavioral1
Sample
26ade0afe41d03546ab6edffed082ac8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
26ade0afe41d03546ab6edffed082ac8_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
26ade0afe41d03546ab6edffed082ac8_JaffaCakes118
-
Size
33KB
-
MD5
26ade0afe41d03546ab6edffed082ac8
-
SHA1
3d638a0404c7f501e968e0885c164aeb09ae3e69
-
SHA256
f0aeb0a270cb50d6088bb2766403d11df08d9312d7893ab1f81811821a51a921
-
SHA512
39308b470a6158e4d4be05c9c778d824f301e70d8d616c7b22cdbe9d732547ce27a840f19e0c3a624a7d6768ed11ae576afa30cf1389c4aa55086290b9f6681d
-
SSDEEP
768:Xl3ld2yIBI51idVwGBGqAePysiC4oUt6mRnTBU1FfSY0rXH+BL4vmy3b4:dz2961idVwkfwslpUtBRTC1Ffb0r3SLj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ade0afe41d03546ab6edffed082ac8_JaffaCakes118
Files
-
26ade0afe41d03546ab6edffed082ac8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xiaohui Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE