Static task
static1
Behavioral task
behavioral1
Sample
0fe12951681e00fd5725da5c9324c566_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0fe12951681e00fd5725da5c9324c566_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0fe12951681e00fd5725da5c9324c566_JaffaCakes118
-
Size
1.6MB
-
MD5
0fe12951681e00fd5725da5c9324c566
-
SHA1
9754c883523190405a213daaa1da3e1aadcff541
-
SHA256
7574771d49fc72788dcdecc421d2ee071c41764f8f9a5c762eeae5cd63b5fd6e
-
SHA512
871817b01e097043034f4959c24d21d8f3c86e8ea2dd6ddaac27e5632a142a4365f770389ffd2d1915f285adf0e78d23198f7d3df53049714b473fcbbeed5d70
-
SSDEEP
24576:+8me3AMyzGK7pbDlBeB6d72/6NDwPQeLrjB7+IO+//OxFLmIsgMnUC0ROJUQGcH:ZAVpvPe8d74igfrN7+IO+/2xFLxsMRc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fe12951681e00fd5725da5c9324c566_JaffaCakes118
Files
-
0fe12951681e00fd5725da5c9324c566_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE