Static task
static1
Behavioral task
behavioral1
Sample
fc01e2dd441389649d93c404b152a97e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc01e2dd441389649d93c404b152a97e_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fc01e2dd441389649d93c404b152a97e_JaffaCakes118
-
Size
81KB
-
MD5
fc01e2dd441389649d93c404b152a97e
-
SHA1
7cd3d918d2f95b668bdbc4a79523f6154f5de676
-
SHA256
9cb464645d64e77449ef72078f01fd364dda6670512c88f614ff5f8757bf3362
-
SHA512
8158adeac6d306adb2b1f5044959f3068612b34fbdd50f45fe022eadc757746f9f73e9a811850b61ba66a66f42f5b6340c733583424531496fd2c0f351d24c0e
-
SSDEEP
1536:K3bdcuDvBXvw44I2WduO5DWM6zH/W9U64sRwBImsrBfK+GoePu6wFIHhT8:Krdc6vBY4P5DWM6j4UguB+telwFIBg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc01e2dd441389649d93c404b152a97e_JaffaCakes118
Files
-
fc01e2dd441389649d93c404b152a97e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 70KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE