Static task
static1
Behavioral task
behavioral1
Sample
0a84e00d570218ae71f417f8434f9ddb_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a84e00d570218ae71f417f8434f9ddb_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0a84e00d570218ae71f417f8434f9ddb_JaffaCakes118
-
Size
79KB
-
MD5
0a84e00d570218ae71f417f8434f9ddb
-
SHA1
dbf5c6c54668e219f5f8b5a3cf36f09bc8290973
-
SHA256
6b4cdf0a022270ebb7d1946ed2d991e449a5d23ec68c698e39cda1f265223000
-
SHA512
c4f5c747c0a0b037374f669f174e684212459c479ba32df4da565bfe3e00c53400753137ffff4abb3e0abbcb7e4711c9c19b24aa47fdb0f92318130c2f9d8a31
-
SSDEEP
1536:xWsTcHe2DMNsSA53UxYM12SD/f2CZWu+ndvmyVzrgUI+i7Oj:xWsTcHlICpkxYMwPAodvNxrg62O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a84e00d570218ae71f417f8434f9ddb_JaffaCakes118
Files
-
0a84e00d570218ae71f417f8434f9ddb_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 17KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ