Static task
static1
Behavioral task
behavioral1
Sample
ff2aaab85b92f382af6c5e2d79c2c913_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff2aaab85b92f382af6c5e2d79c2c913_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
ff2aaab85b92f382af6c5e2d79c2c913_JaffaCakes118
-
Size
33KB
-
MD5
ff2aaab85b92f382af6c5e2d79c2c913
-
SHA1
58fc8e965d31580457224c1c1a32ca8c3d8129e8
-
SHA256
5dd32a27ac63e91fc58c96bf5c7a113e5bcb01745b67f7c72e56ac2c0ab06446
-
SHA512
b14ce820f4087ba97f856357a447d8957ada43b13cf5adf5bcb466bd5dfc79bf52809a8322da4833eed6de630aaa620d224379b3fb4d555e17dcab86671bdacc
-
SSDEEP
768:CqY7XqJYZzTMLiJgIQ8FpDApM6tc1B2+QRXOOKd6OPkHVW7XeBb/gp18Q:dYL4LiJnnDApM6UZnd3+WDe5/415
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff2aaab85b92f382af6c5e2d79c2c913_JaffaCakes118
Files
-
ff2aaab85b92f382af6c5e2d79c2c913_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ