Static task
static1
Behavioral task
behavioral1
Sample
59f0982c811e3d33ed6f27f18955369b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59f0982c811e3d33ed6f27f18955369b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
59f0982c811e3d33ed6f27f18955369b_JaffaCakes118
-
Size
83KB
-
MD5
59f0982c811e3d33ed6f27f18955369b
-
SHA1
a819d7ed4449cad110e78fc2a54e6d1fd8a4b4c2
-
SHA256
a1e511dc306648c936f0a83af11ef4bf57178f6bccdf248cd7c3821c3e979716
-
SHA512
a04fee1bd3817e340d2fa8bddfd9ee2ffad72cec502d960e848d592e183d392d0c57d05f5f9141a5d46704ebea34dafe733b935752703de363a766076e5809bf
-
SSDEEP
1536:Evau5lBAp0CJI+/8u3hxim3blNCS0pED/MEmZJI+:E12p13ym3Dt0pcM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59f0982c811e3d33ed6f27f18955369b_JaffaCakes118
Files
-
59f0982c811e3d33ed6f27f18955369b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
kqyfa Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jg Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eg9o Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE