Static task
static1
Behavioral task
behavioral1
Sample
f8d5b7fc7086a77da18a71b4558fe700_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8d5b7fc7086a77da18a71b4558fe700_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f8d5b7fc7086a77da18a71b4558fe700_JaffaCakes118
-
Size
30KB
-
MD5
f8d5b7fc7086a77da18a71b4558fe700
-
SHA1
44ef843e14883622cc5d7f1f42ae9de3b7dcc6d6
-
SHA256
d1db189a8789f296b6628f5d1d1c2591b10cb44d6edd0be7e4f162761c4a3865
-
SHA512
cb2f1997d40508cfc3c6c80d7029a02aee165c1640099d9e0ce96aefaa64aa5624a2468a31bcb8af3fb3342237093e115fef5f740d7a66e13592c5a0dd50765c
-
SSDEEP
768:3lKUqiF9SoHKuROcLJxTMbNfiQTME/kTBo9C:3JjF9WuRnLJxuNfrMukTBoU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8d5b7fc7086a77da18a71b4558fe700_JaffaCakes118
Files
-
f8d5b7fc7086a77da18a71b4558fe700_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lbd2ssz Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE