Static task
static1
Behavioral task
behavioral1
Sample
f88ff3431b4804eee0ee65a4fd3b1f6c_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f88ff3431b4804eee0ee65a4fd3b1f6c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f88ff3431b4804eee0ee65a4fd3b1f6c_JaffaCakes118
-
Size
33KB
-
MD5
f88ff3431b4804eee0ee65a4fd3b1f6c
-
SHA1
d46b6b6aaf3d341a12277cae5fe85ff49511ce23
-
SHA256
a4dc0cd8be0210526a251f40cbec1589a9a3ff5f388f18c4eacace0ddfd1bd94
-
SHA512
a84def0dea73b9ddb8523f5ec758832c7f3c61afdb8242613a9c20c96023ff88189374333083fa9596a710e6dcec340447b5224be357f6c6023c72279fcf1c31
-
SSDEEP
384:KvSEFuFwKVvIkiew9y5cImYD+ZA81Z1Jw8IONwhAg6Pm8duFjB3eJN1nj6J5wyh:PEgFrlRw9y5NSn1Z1O6iNBOljIb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f88ff3431b4804eee0ee65a4fd3b1f6c_JaffaCakes118
Files
-
f88ff3431b4804eee0ee65a4fd3b1f6c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE