Static task
static1
Behavioral task
behavioral1
Sample
266b81303f33fe73e4b9224934955983_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
266b81303f33fe73e4b9224934955983_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
266b81303f33fe73e4b9224934955983_JaffaCakes118
-
Size
30KB
-
MD5
266b81303f33fe73e4b9224934955983
-
SHA1
ffd162b0a602da9410dadd9b1bc179323e1d6d0c
-
SHA256
e57f61dd88dd1000d8f633469e1d88552f55dd0c9e1e147bba22b6d73e7b4d9f
-
SHA512
e4cd58628dda4c70a29f22938d9f225a0b6bc1be7749ad6910232066b0d60d4e5d2760a82c5c160e156f74fe2ac75aa81760d728750ffb8ba38efa1ed71aa89d
-
SSDEEP
768:EnceeTo1x43rmQCBud8XoHZm2iyAxcONe0oZwvZ:EcKb43aQCA+XqZOXxcIYwh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 266b81303f33fe73e4b9224934955983_JaffaCakes118
Files
-
266b81303f33fe73e4b9224934955983_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
xrbo7bzk Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l27 Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d87 Size: 302B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE