DllMain
Static task
static1
Behavioral task
behavioral1
Sample
core.bat
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
core.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
false-64.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
false-64.dll
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_9583faaa2b9f2e6210d7877602318ac9a620fc079662db679c6d02f47b0d17e0
-
Size
389KB
-
MD5
05eb3ee8bd60fb3419b18d0acdcbc35f
-
SHA1
acb9417fb41895a6ec966124863a050723b8634d
-
SHA256
9583faaa2b9f2e6210d7877602318ac9a620fc079662db679c6d02f47b0d17e0
-
SHA512
1cfc39172d2ae9d7fe4eabe2659ad9df7fd15ee228c2d1c6398e665b3cda907b0273b75768b1d629bffc3d15703151a835c0d0c7752e7784ec4a864a1e8c8daf
-
SSDEEP
6144:+WYQ9HnHu8wB2viJ/6YsRaOgMqqs+dgkSt+32VGuqe/pN1TpH79M0lsGLi1hoSQJ:+WYQ9HY96DaOgXV+xytrDtdGZMi1Ymon
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/false-64.tmp
Files
-
JaffaCakes118_9583faaa2b9f2e6210d7877602318ac9a620fc079662db679c6d02f47b0d17e0.zip
-
core.bat
-
false-64.tmp.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
license.dat