Static task
static1
Behavioral task
behavioral1
Sample
050df91a73254f8d16e0e60233a288de_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
050df91a73254f8d16e0e60233a288de_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
050df91a73254f8d16e0e60233a288de_JaffaCakes118
-
Size
42KB
-
MD5
050df91a73254f8d16e0e60233a288de
-
SHA1
9abff937763e6b0667a35e80bd83b08b6e4dec7f
-
SHA256
bd7d15cad73d2955f9902971c0e6bd0347277ef418c2a18d5acf9e804d0b1dc9
-
SHA512
5bd059b5e893bd415c81943ae05fd7d6a67a39b96ae27e182d8b0ebf8e2f5b77670ae3834e54e027921105f7df6111641b37765ab875efd9534ac6abb5239d09
-
SSDEEP
768:PkQd33QTlx4HfU8KulOPNovXv+/+BICVoVkLICOlRKwdlYHxIhogTpuoWSnXa:PD33QhxOUlfPO/2/wVhhURKgqX2nXa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050df91a73254f8d16e0e60233a288de_JaffaCakes118
Files
-
050df91a73254f8d16e0e60233a288de_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE