Static task
static1
Behavioral task
behavioral1
Sample
d0badcde9aff80c73e49eb0a0d05bd3a_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d0badcde9aff80c73e49eb0a0d05bd3a_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
d0badcde9aff80c73e49eb0a0d05bd3a_JaffaCakes118
-
Size
590KB
-
MD5
d0badcde9aff80c73e49eb0a0d05bd3a
-
SHA1
0a3d966db7c30bacc093dd9e0296cf358376d8cb
-
SHA256
bd6de74eabbdb72321816001868b945a08876fea3495d6f5f7af2598923b5ab1
-
SHA512
85691967e4a12bfae8ea7810c006cb5da4e6ed96b383ecea47e9bd723b8aa695d752b475929a2ad9ccf8f5f6a14c880bc1c08078a903573890ff2c6810ae77ed
-
SSDEEP
6144:sf0whtg17aVyTt1xbTmgl8rhDM/2yT/wi0c6XxEtWQg4oTqDoQvS5a09w7bpQ7:AU86Ii0B0g4omoGSz7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0badcde9aff80c73e49eb0a0d05bd3a_JaffaCakes118
Files
-
d0badcde9aff80c73e49eb0a0d05bd3a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ