Static task
static1
Behavioral task
behavioral1
Sample
12aefcce820dfa75f609db154aae679c_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
12aefcce820dfa75f609db154aae679c_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
12aefcce820dfa75f609db154aae679c_JaffaCakes118
-
Size
2.4MB
-
MD5
12aefcce820dfa75f609db154aae679c
-
SHA1
18df356b18115928f27eafc4b1392eeda678e979
-
SHA256
3536e1c0fffe041f50e47abe90fa2d8a0adbcd83cf21d3e8d41fa7d2d921cc8f
-
SHA512
fce39e3c2a8877a45a9ba0c9cd874f8de32a5782ec9493f66432364436855f6c90ff7e777ea2e17accb6d363ebf4ed3cfc9e7f8f5382cf69bfb1aa5afffd6837
-
SSDEEP
49152:GxfcP6/1/QQ0ANFrbfxdqPeQ6eg+XMD3hP7zfOHXD:GxfcP6/1X0ANFrbfxdqPeQfg+XMD3hPQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12aefcce820dfa75f609db154aae679c_JaffaCakes118
Files
-
12aefcce820dfa75f609db154aae679c_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
�L�!Thi Size: 1558.2MB - Virtual size: 1831.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ode. $ Size: 1216.0MB - Virtual size:
IMAGE_SCN_MEM_DISCARDABLE
8 Size: 141B - Virtual size: 16B
������ Size: 160B - Virtual size: