Static task
static1
Behavioral task
behavioral1
Sample
072bb8a86ea941dd9ba9942044424ab1_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
072bb8a86ea941dd9ba9942044424ab1_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
072bb8a86ea941dd9ba9942044424ab1_JaffaCakes118
-
Size
123KB
-
MD5
072bb8a86ea941dd9ba9942044424ab1
-
SHA1
a61757eb2d96a0aae2c2df382b7d3af57a970327
-
SHA256
f6d60b3da414b8e4fc259381e2e4ade185c9e2d29461d4947f95570ad0611de6
-
SHA512
885a99396904a3cec7ddddaa047913073f932b24ba6458881ce1870520b56077f0f7aef575d54df2c8fd2e039cc1915f42754f2875b5efa3bd23764cacba5436
-
SSDEEP
1536:xivVQfKzBKc1shgbRZIVOUU9yTpeeAQm5q5FfJ/Zz:xivnMO2GQm5q5FB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 072bb8a86ea941dd9ba9942044424ab1_JaffaCakes118
Files
-
072bb8a86ea941dd9ba9942044424ab1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
dby Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zouat Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wm Size: 2KB - Virtual size: 550B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE