Static task
static1
Behavioral task
behavioral1
Sample
1b4105fa581bf5918fc4951aeed73860_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b4105fa581bf5918fc4951aeed73860_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1b4105fa581bf5918fc4951aeed73860_JaffaCakes118
-
Size
25KB
-
MD5
1b4105fa581bf5918fc4951aeed73860
-
SHA1
ea5079d9f8739e043e5127188d8fdf2e0e0a7efd
-
SHA256
857f9f7cb886f339f5df5d0d7d364776c6b31fdc4aece9224b6246833921669a
-
SHA512
b809e1d43a9a758ee70ee2b94b2bfb08e0b7850b1db563263b6cb43ff1d0bf52706e71e84c6e6dc90dff6a96916ac11e68bc06c5aad8f00e1ed4ec710a51d58a
-
SSDEEP
768:a6N9tkcK/hr9UjkDTxtY3tznZdvhjNRz5O:am5K/hr9ykatznZRhX5O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b4105fa581bf5918fc4951aeed73860_JaffaCakes118
Files
-
1b4105fa581bf5918fc4951aeed73860_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
r8cf97w Size: 146B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE