Static task
static1
Behavioral task
behavioral1
Sample
5c2fcb6bad902765d64749322a2cf88f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c2fcb6bad902765d64749322a2cf88f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5c2fcb6bad902765d64749322a2cf88f_JaffaCakes118
-
Size
98KB
-
MD5
5c2fcb6bad902765d64749322a2cf88f
-
SHA1
f7d200dbbff1f9d94d8558bd5e9db9622c3fc366
-
SHA256
eaa1b45177e7041e3454b6bfb7d9a48e444727b9d81ae8723e5c769d4e8d9f7f
-
SHA512
bc24fba6d564ddff34062b14e47deb7564e60ca8de0830eec86edbaa3f0abdf8f9614a6d327ec9f0ca3644c3e4e578bea3e70080f9c021fe0e60071418de341f
-
SSDEEP
1536:EortQ3FAGbfOcn0F256E64UvnZ6rEtb4X:jrwSG6W0FaT3UUX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c2fcb6bad902765d64749322a2cf88f_JaffaCakes118
Files
-
5c2fcb6bad902765d64749322a2cf88f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.tttt Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdddd Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dddd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
woria Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rerer Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MABIDE Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bao Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE