Static task
static1
Behavioral task
behavioral1
Sample
051c2f50cc90944309ae3c9b8a6163e8_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
051c2f50cc90944309ae3c9b8a6163e8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
051c2f50cc90944309ae3c9b8a6163e8_JaffaCakes118
-
Size
99KB
-
MD5
051c2f50cc90944309ae3c9b8a6163e8
-
SHA1
68705d98ffe20242220122f3dbf380eba2bbbcd8
-
SHA256
c1fd376b85e91b91193da2667f71b54fe0c3de0a456d249956417dbe3672a8bf
-
SHA512
bb6ee48e888bb14bd74e83cd06ccd5e6e9b964b1371e30c95e14f8b2f773fc0cd538ef3775d974b4b3eae225df51f38cb7c7021a3d8f2213b967d1d821b7e056
-
SSDEEP
1536:3t0R9ocgGZIO6O4cuI/4+qoKmwKg4ToH/Ohr/bUimh9Ta5LTOEh07EKV06:90Rq4VKq4+qWRToi+9Ta5LTOj7El6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 051c2f50cc90944309ae3c9b8a6163e8_JaffaCakes118
Files
-
051c2f50cc90944309ae3c9b8a6163e8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.erdf Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rtfgy Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tgyh Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edrft Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rtyhgj Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.huckuc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ