Static task
static1
Behavioral task
behavioral1
Sample
1be0e671ddbdbb2ce0250ae99ee0a13a_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1be0e671ddbdbb2ce0250ae99ee0a13a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1be0e671ddbdbb2ce0250ae99ee0a13a_JaffaCakes118
-
Size
16.3MB
-
MD5
1be0e671ddbdbb2ce0250ae99ee0a13a
-
SHA1
0adbe11244c4266500bb680f89679c4369208d14
-
SHA256
1bc16759d0408a7d1f5c9e9ea03ac0318d3a95d2a24847c481aa467b782a37c9
-
SHA512
6f626a907c9f65fa45d902a8479d8ae39a318d987a6e508d510f1a33103b1542fdb7bc03247298ee73cb287641bb4e2c08a44863ec815a569c42895d38030508
-
SSDEEP
12288:9ODOI6eTODOjKUscBDRbiIvf3lIREnqJbL6MilXHijem074xkVTkv369:9OzOM2ibn4j5074xkVTkv369
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1be0e671ddbdbb2ce0250ae99ee0a13a_JaffaCakes118
Files
-
1be0e671ddbdbb2ce0250ae99ee0a13a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 16.3MB - Virtual size: 16.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ