Static task
static1
Behavioral task
behavioral1
Sample
087bfce7aa194ab70be9989beccb3c5f_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
087bfce7aa194ab70be9989beccb3c5f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
087bfce7aa194ab70be9989beccb3c5f_JaffaCakes118
-
Size
25KB
-
MD5
087bfce7aa194ab70be9989beccb3c5f
-
SHA1
26ea2d74ded18f62380a7b40c8621a0cf5944805
-
SHA256
e07b2e7000ba4199941648b31eb3b89d23eac1b953d774ecf0293c7b65604dec
-
SHA512
7198be74217966cf1c0439e5a6efb8e67663811901205df9485e685b0f7637cdc9c5081cf1460b9baa3e851cfcf5c7056c1c17b795258200983af6f85d384610
-
SSDEEP
768:0NcE6IRC3nYQbZX4Rnk8sqZBvNHPl9w0UyeRYR:06G+YQbF4RDhZVNb73eiR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 087bfce7aa194ab70be9989beccb3c5f_JaffaCakes118
Files
-
087bfce7aa194ab70be9989beccb3c5f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 246B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE