CreateObject
Static task
static1
Behavioral task
behavioral1
Sample
15b54fed8f5c5c81e6c1366fd1d093ca_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
15b54fed8f5c5c81e6c1366fd1d093ca_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
15b54fed8f5c5c81e6c1366fd1d093ca_JaffaCakes118
-
Size
124KB
-
MD5
15b54fed8f5c5c81e6c1366fd1d093ca
-
SHA1
85f49a076af2d86964e3107c316b8d40c99fce4b
-
SHA256
f9461f470931098eae62423353750d13bead117190212fbc2ad0284b10dfbb72
-
SHA512
99a92ce6d7652953910fcd16320eec80bd4442a1c6c0ffcd7d3d54a6fda2ddc7fa73cd320960624f00d9c7c30bbff3d40acd039800cbc0954e3f7301cc55d946
-
SSDEEP
1536:rSq5LbQngo+MgfoLavwfj4M+Ae3dIHmjW6HBi2ddoZHjzLxMeXTN:LHidaoHrT+5xjWmBi2DujBMSN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15b54fed8f5c5c81e6c1366fd1d093ca_JaffaCakes118
Files
-
15b54fed8f5c5c81e6c1366fd1d093ca_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
nsp0 Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE