Static task
static1
Behavioral task
behavioral1
Sample
1612286716701124c2ecb168580c3d10_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1612286716701124c2ecb168580c3d10_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1612286716701124c2ecb168580c3d10_JaffaCakes118
-
Size
37KB
-
MD5
1612286716701124c2ecb168580c3d10
-
SHA1
86bced18805ed8f84824eb194bbb26bf6f2d7066
-
SHA256
571ec5e34c563362ad8d4ba49e9d672aa6c9526c2d74b2eee800fca57356eb41
-
SHA512
76c86239cadb51b4076ba4804684cccbd52e11f67c32e8a0b627fb30f9d6627ca7b30d7d0bee135766de756be29087491fb6331f802a2efc98904e231f29d568
-
SSDEEP
768:AcVDD3DpVWGJ98mPLsLeCGZb3x3ZMCmbxvtB:5VvzpVWLmLO6LpMp5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1612286716701124c2ecb168580c3d10_JaffaCakes118
Files
-
1612286716701124c2ecb168580c3d10_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE