Static task
static1
Behavioral task
behavioral1
Sample
fb9ee535ddb3e5159996aa6a121362ce_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fb9ee535ddb3e5159996aa6a121362ce_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fb9ee535ddb3e5159996aa6a121362ce_JaffaCakes118
-
Size
79KB
-
MD5
fb9ee535ddb3e5159996aa6a121362ce
-
SHA1
009afdb95e911de6309c271d329868801c9d28c0
-
SHA256
f4efee642d8a76ed40699df7a4e549e7c0c5c7c5c5a5e1e1966673f5cc85c58e
-
SHA512
696577ae52dff911cc9461f6960c2266c3da8d5ef7c082389a06d0cd1420c8afebabc5f2ae7018592f96bde1db0d37fce772afdcbd45d840552ce7c7549f99b7
-
SSDEEP
1536:7DyC+PAcM4T+kzUJpfe2bSvvty4iOOruUA9bn:71QJM4TfzUJpm2b6vtvHt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb9ee535ddb3e5159996aa6a121362ce_JaffaCakes118
Files
-
fb9ee535ddb3e5159996aa6a121362ce_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
bbhp8u Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mbgz Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wqq5phff Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE