Static task
static1
Behavioral task
behavioral1
Sample
101f6530a165394810131070baca0e3b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
101f6530a165394810131070baca0e3b_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
101f6530a165394810131070baca0e3b_JaffaCakes118
-
Size
318KB
-
MD5
101f6530a165394810131070baca0e3b
-
SHA1
3e4c13c6b6b20b2915ac15f1260d7d1467ef4dca
-
SHA256
d776eb904cf317f05c2b11edb47b0452faf4c89d9f711ab80b3ecaeb2531392d
-
SHA512
81bb2baa39bf60291b171f55fa0ae8b37fa4b1f7037c34c5e313aaeddec24d6242f40f2a2bede8c91c38f1f33434405b1bb14d0a6c1ad7474e64384899d577b8
-
SSDEEP
6144:yHtHBlor5LNPNa8IdFXMz3J+k6MSeN/gZ8PDi/6B+Ehk8WZ83GVmknc:itHB4XanDXMz5+kQ4PDiq7kB8GVmkc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101f6530a165394810131070baca0e3b_JaffaCakes118
Files
-
101f6530a165394810131070baca0e3b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 228KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE