Static task
static1
Behavioral task
behavioral1
Sample
1af6cfd8046b14c1dccb799d1e37dd2b_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1af6cfd8046b14c1dccb799d1e37dd2b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1af6cfd8046b14c1dccb799d1e37dd2b_JaffaCakes118
-
Size
124KB
-
MD5
1af6cfd8046b14c1dccb799d1e37dd2b
-
SHA1
d1b6e6a313cf8975b9d7f46f423478a77fb4cf4f
-
SHA256
5067dbc25ced17815ba3b84c137a873e72ec588077c5ad130982d6d966ad6c92
-
SHA512
f1134f840d7fd3196429b1a721e9047fd001e9eec632267ab1234c1453f2a5833a4fcd61b40264307c0432518a7282709c5051aa3acc77dfe1444867809d6c5b
-
SSDEEP
1536:+M4y3r3Yp84tfe8623DTP7DjrMcmBO4ojyrYBSU11evPVNl52GZK:+M12x5jP77jSOBjA6SU11evP2GZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1af6cfd8046b14c1dccb799d1e37dd2b_JaffaCakes118
Files
-
1af6cfd8046b14c1dccb799d1e37dd2b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
z9y Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wnifq5g Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ssz2nr Size: 646B - Virtual size: 753B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE