Static task
static1
Behavioral task
behavioral1
Sample
1930059c4fd1790c1233091d0fcaa1cd_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1930059c4fd1790c1233091d0fcaa1cd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1930059c4fd1790c1233091d0fcaa1cd_JaffaCakes118
-
Size
79KB
-
MD5
1930059c4fd1790c1233091d0fcaa1cd
-
SHA1
f8ec32d8fcc4fd5797839d00639e51886a78a0f0
-
SHA256
15abf03ddc2f0dcb2ca7e36f0c29e24c096029c2625ea49a1223faca43c417d8
-
SHA512
65d6ebaa6a18132d853bc49a6d10cd19a11ab319410f614ef83af91723239c93d1e5fa5c326eaeded7fbe466ee0f7e8ad2fb74111dc80a6deafe77e2d5db6537
-
SSDEEP
1536:KCe4lWJbjSuxU/PS6K1p568CCWyqKbfKDP0/Ofa6onZAe:KSWJbGuU3S6QlCC7rbKDMWC6cZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1930059c4fd1790c1233091d0fcaa1cd_JaffaCakes118
Files
-
1930059c4fd1790c1233091d0fcaa1cd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE