Static task
static1
Behavioral task
behavioral1
Sample
198c887718d995725eae76cf569ea954_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
198c887718d995725eae76cf569ea954_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
198c887718d995725eae76cf569ea954_JaffaCakes118
-
Size
2KB
-
MD5
198c887718d995725eae76cf569ea954
-
SHA1
b427a0dfd7e4380762c73487b76d8a0baba11de4
-
SHA256
f285ba47eeaab58fb970af0e2d5b34947d866a7db62ac4fb8f1504182251e4ba
-
SHA512
104fcbde06bb1cfd1122ac01bbf71be58d9caacd326f0b325eb9fc6efda7de0321349c0555f2ac4cd033b6349dbdd7088b3e38aa158f78a72b9389d67d6e9393
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 198c887718d995725eae76cf569ea954_JaffaCakes118
Files
-
198c887718d995725eae76cf569ea954_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_BOX_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE