Static task
static1
Behavioral task
behavioral1
Sample
5b02641ba12b3db596b1357c8aface8f_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b02641ba12b3db596b1357c8aface8f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5b02641ba12b3db596b1357c8aface8f_JaffaCakes118
-
Size
26KB
-
MD5
5b02641ba12b3db596b1357c8aface8f
-
SHA1
ff3d7891e1dbdb0f5f13a541780e4c9e9ed4cf31
-
SHA256
296ded4cf2cd5bc68dda5639699be921fcaa8657361c7e46e56c01f5df448b73
-
SHA512
0de6d5a7615a037a725a81df9247d77d56f91937c10ce3b15381b3959a6879e2c94b53104940af31591061e306875193ae38596422acc0abab4b24aeb7c856ae
-
SSDEEP
768:V/q478GNnuS35Aiep5TOHwBloGKrVrcQFg8P:VC47VJB3GinQBRMo2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b02641ba12b3db596b1357c8aface8f_JaffaCakes118
Files
-
5b02641ba12b3db596b1357c8aface8f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
j Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ejonxwt Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gyqoutw5 Size: 706B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE