Static task
static1
Behavioral task
behavioral1
Sample
f1da266f6e63891e3712cae6846031db_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f1da266f6e63891e3712cae6846031db_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f1da266f6e63891e3712cae6846031db_JaffaCakes118
-
Size
83KB
-
MD5
f1da266f6e63891e3712cae6846031db
-
SHA1
b4d568ae511a3d3cac1a70e0fb4d7ea8f67d7c4c
-
SHA256
2597a524930dc0f6f4f88bc1022eae52ed90178e478eaf30e2210163ae4a9449
-
SHA512
96e3e23eb8755d43d0a1fe24b3df5bab30da69db3c3401f2725532306bba122ceb8ff99c4d67f336e27c0026067ca46a1f9e7161e0b7762716ae87d157811d7b
-
SSDEEP
1536:MiZxqc9LsNaMEr/hfONL5tnlCiK/W3kzUEMI6nYk3aEvVybx:Mw1LtMS5ONL5tnlFKesId3aWV+x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1da266f6e63891e3712cae6846031db_JaffaCakes118
Files
-
f1da266f6e63891e3712cae6846031db_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ