Static task
static1
Behavioral task
behavioral1
Sample
1bb8df8e0912ef92fc69561b18300a1c_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1bb8df8e0912ef92fc69561b18300a1c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1bb8df8e0912ef92fc69561b18300a1c_JaffaCakes118
-
Size
34KB
-
MD5
1bb8df8e0912ef92fc69561b18300a1c
-
SHA1
bc121147f8b420ae9cd6ca51df563d0950279f34
-
SHA256
7d2bec57cb41022bd59cd58f3d45ff813cf877d41dae389e5cac984bc957f726
-
SHA512
e7cd6cf0b41fdbcca2fece73e2d9f9044f1ce8570d89972469fdb22445b32dfbc3e5292997f6fb1ca3c7270bc92e841f3aa99c7f5afd85fde6cc0e451cfe0ec3
-
SSDEEP
768:EJFgX49FrvPmZDFeSqpYA/qxDjc/Ogzabt/n6i3+WXSdUT:EJFk6FbPmZpeVt/8kaoQ+2+M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bb8df8e0912ef92fc69561b18300a1c_JaffaCakes118
Files
-
1bb8df8e0912ef92fc69561b18300a1c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE