Static task
static1
Behavioral task
behavioral1
Sample
22f56f8ea7a6d0bac32fed7726e7403b_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
22f56f8ea7a6d0bac32fed7726e7403b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
22f56f8ea7a6d0bac32fed7726e7403b_JaffaCakes118
-
Size
59KB
-
MD5
22f56f8ea7a6d0bac32fed7726e7403b
-
SHA1
6c379a43af6edfac01f56515dea49183840a599f
-
SHA256
6fd37dcd50a2500aef897788999e9a9ae6987093e4a6764fa1f2019a4a5fb0bd
-
SHA512
89c66cf53687fb160a5cadaaade51b107f37150a2e230721f87b0291a30acafa9dbbdf71a41775943e30889d8a5fbf10c187f6cf383f7c646c0e2da52e65908f
-
SSDEEP
768:LTECq/PJBTd6zVW4/SpDj//sp0dpH268ugDtfP6qBg/xvkYLrMS01N8aeek5li:LTExLAJZcj//A0e68rDZ7S/prrMOeKc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22f56f8ea7a6d0bac32fed7726e7403b_JaffaCakes118
Files
-
22f56f8ea7a6d0bac32fed7726e7403b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bpfgmrm Size: 756B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ