Install
Static task
static1
Behavioral task
behavioral1
Sample
0a1ba0071f2fb947b02cd146fa8d1e8d_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0a1ba0071f2fb947b02cd146fa8d1e8d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0a1ba0071f2fb947b02cd146fa8d1e8d_JaffaCakes118
-
Size
40KB
-
MD5
0a1ba0071f2fb947b02cd146fa8d1e8d
-
SHA1
b227227c0a1af252a042c383310e171fcafbdc4c
-
SHA256
33d27b815995cec52204cf135f81825e70be8b322780166265576ccf946f4381
-
SHA512
538e14d25b0ac9a29a28d845b2406663945454af2b4b7aa23469541b55c2444681c454d94e1d2b2f18914eede212196684246eb66943b68134f38470925978fd
-
SSDEEP
96:EwRPeLMGKG3ljAvWC61WnV+wTJXTO4feaLqTio066p+W6g3H83MJqzJ:TFeIW3l0vdV+mJXTTV9fp+W6P5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a1ba0071f2fb947b02cd146fa8d1e8d_JaffaCakes118
Files
-
0a1ba0071f2fb947b02cd146fa8d1e8d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE