Static task
static1
Behavioral task
behavioral1
Sample
232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
232a454ac21e514c999c623fcc178b5a_JaffaCakes118
-
Size
628KB
-
MD5
232a454ac21e514c999c623fcc178b5a
-
SHA1
4883be14f93bb7a886f1654a91f53a9881226ce6
-
SHA256
a7225d80fb20049a1cb2ccdbab239c7be895f0eb56ee7ffa42d6bb47727353b9
-
SHA512
b1379278819c83742ecee8cd381e3fbbd514824bf3739fcd08882a68b0391b5713da27a7c6aadff9909f5f79ccb219be763390b028c4ad4dbb1a4c8dd241c039
-
SSDEEP
12288:HflFLr0rqSkgM3ICXBHNvFQu0fTPC6b3PiFaob1gsiFbsePPTCvOnZvT9UI0TK99:/rHgk79CTPC6bfJPFbsePPTBBTeTe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 232a454ac21e514c999c623fcc178b5a_JaffaCakes118
Files
-
232a454ac21e514c999c623fcc178b5a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ