Static task
static1
Behavioral task
behavioral1
Sample
15bf480b92f6bd7561cc79ef9c0daefe_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15bf480b92f6bd7561cc79ef9c0daefe_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
15bf480b92f6bd7561cc79ef9c0daefe_JaffaCakes118
-
Size
23KB
-
MD5
15bf480b92f6bd7561cc79ef9c0daefe
-
SHA1
4e5c66029b743930a98423c22afbba6cdee1708f
-
SHA256
ab98b75918daa00b9e722610f6269c3913071fa1c0f6346f28be9cb188955ae7
-
SHA512
7e8ceee2958d1b118a49c22ded19cf2404c391e5a350e71e3c02a4085108258ba446800912fb46872090aa5ef361811109a02833f3464a50cef2144b3bc52aab
-
SSDEEP
384:WoCRi+HapL7Hfml3SPCnJHhjKqHwriVSv0eXhhGnyDF2GY8n821:BkapvskCJHhO2NyDF2G8k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15bf480b92f6bd7561cc79ef9c0daefe_JaffaCakes118
Files
-
15bf480b92f6bd7561cc79ef9c0daefe_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 213B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ