Static task
static1
Behavioral task
behavioral1
Sample
f1978ad587de25e84b4890843aada204_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f1978ad587de25e84b4890843aada204_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f1978ad587de25e84b4890843aada204_JaffaCakes118
-
Size
25KB
-
MD5
f1978ad587de25e84b4890843aada204
-
SHA1
5db004343539fbb4efbfca37bc576ac9ce71dead
-
SHA256
4622db889c0738e352a13c570b0a5316c8af0b651efa5b77480445ea5e41dacd
-
SHA512
d2e08f9ef5763c51dd4b8f2d46ffb26b365a8273521083638839efd594c853aeda2797d64d60d68a631bb2ed295ab8c8baedac4c43bc5865a8dc494cebffad60
-
SSDEEP
384:hqLO9JwcMVWWEvEDonhvZv69IRiC5Lc7K3oqOEcpxd5ss10heiW8y9Uwv9Eb+p:MLOccCo5wA/eK3Rc3Xss10+WKp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1978ad587de25e84b4890843aada204_JaffaCakes118
Files
-
f1978ad587de25e84b4890843aada204_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 198KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE