Static task
static1
Behavioral task
behavioral1
Sample
26a37b2976e132f084af73e1afe33558_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26a37b2976e132f084af73e1afe33558_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
26a37b2976e132f084af73e1afe33558_JaffaCakes118
-
Size
88KB
-
MD5
26a37b2976e132f084af73e1afe33558
-
SHA1
f5de6fdb0b43556a5c9e14c6f476f9a12fe13394
-
SHA256
ca795f7c0f48a08799b8e64b904a8a0427dd2a6052f58d7a3aba2a1d2fcb6333
-
SHA512
61abc4f9e349d0031bd0d5d32383451080b92a7f33b6098309f9d9eba870f61b367af6319c81d7a20aac3ff760a5094c06203ba2d63890fb618f8440008f1744
-
SSDEEP
1536:V0XXXE8ufuIijU/bL1w6NKfRn7uEB68JFXLbtpFYAYOQ2zYpC6EJeHv:Vi0uvU/bLaAKZ68HXj/3zYpzWeH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26a37b2976e132f084af73e1afe33558_JaffaCakes118
Files
-
26a37b2976e132f084af73e1afe33558_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.textbbs Size: - Virtual size: 596B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 76KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ