Static task
static1
Behavioral task
behavioral1
Sample
5fba3223b13948c3e45c5f3aa7ea073c_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5fba3223b13948c3e45c5f3aa7ea073c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5fba3223b13948c3e45c5f3aa7ea073c_JaffaCakes118
-
Size
24KB
-
MD5
5fba3223b13948c3e45c5f3aa7ea073c
-
SHA1
680b66da83721131b60ebedf63dc8cca9e859c8e
-
SHA256
643953bff9f0b4f1368ca283969f367de190ad3b52de035bb787b5c7a48a5349
-
SHA512
b91d0b5e71240a26b538e46c87b4246dbbc3c6921e76a2ef3015b06e525065b42f164866da0e2ae8a86dce584c96cb63c121f872d879393b79e5c4f348b64880
-
SSDEEP
384:2RCJ8mkOMEPbqqCs3oNNDYnlI1SA6wuoBGuyYOhE5wj0VsExP+QXx1X6ZRcOYhIa:HJ5zdDxF3ANseSXwusGVE580C8PXXx1v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fba3223b13948c3e45c5f3aa7ea073c_JaffaCakes118
Files
-
5fba3223b13948c3e45c5f3aa7ea073c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 678B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ