Static task
static1
Behavioral task
behavioral1
Sample
1053177e6e9b6458ca1947e53353f171_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1053177e6e9b6458ca1947e53353f171_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1053177e6e9b6458ca1947e53353f171_JaffaCakes118
-
Size
56KB
-
MD5
1053177e6e9b6458ca1947e53353f171
-
SHA1
8c6e75abd5b60c777896cc8e6ed4a8f3c269c13a
-
SHA256
13926bc62d8a5bc4f54ff61683b047c88727d3bc194011ddbb5d69cd9260fbbf
-
SHA512
a66c5f49cc7ea5e48df41d20f3827ea53517711ff19fff1c945fe8f90bb793e58967623b2a3731744107adfc79ffd7239f82dc2bb6c8a50f5c30c87ff5844a54
-
SSDEEP
1536:VJTc8BS/XC2Ehqdr6ppTvJ3ajgWypdhuwLwS++FNT75:rc8A/XCZYOM+pKoVF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1053177e6e9b6458ca1947e53353f171_JaffaCakes118
Files
-
1053177e6e9b6458ca1947e53353f171_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ATTACH Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE