Static task
static1
Behavioral task
behavioral1
Sample
285b2c727fe2dfc953fae91f8f163ae7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
285b2c727fe2dfc953fae91f8f163ae7_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
285b2c727fe2dfc953fae91f8f163ae7_JaffaCakes118
-
Size
162KB
-
MD5
285b2c727fe2dfc953fae91f8f163ae7
-
SHA1
66be4e9ac4f63c0d38ee53f99c1bd6cc030418fd
-
SHA256
1bd657b0a0bc739e506b15ae89aaaa20dd53ff6c1ad449430330e57d99bc4a3a
-
SHA512
89f789f66119e70766c6d152e214a4d77630154e367339c6dacc8aba411ebfe12ce200c8f64c7c0319be558cea31bdb6e13d1a413ecc1825b0aac22aad33f917
-
SSDEEP
1536:PmkjYtmMf+VmvnZajGyYk9sjiSHo9FIA84I7bImfzX+sFyBxrGyYk9:PmzdWmvnZajDYkaji2PAKUmjfgnrDYk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 285b2c727fe2dfc953fae91f8f163ae7_JaffaCakes118
Files
-
285b2c727fe2dfc953fae91f8f163ae7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
lkxcb Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oail9 Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE