Static task
static1
Behavioral task
behavioral1
Sample
62a174b9478d5cfd57420eaf3d76ad2b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62a174b9478d5cfd57420eaf3d76ad2b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
62a174b9478d5cfd57420eaf3d76ad2b_JaffaCakes118
-
Size
157KB
-
MD5
62a174b9478d5cfd57420eaf3d76ad2b
-
SHA1
c7a30c310de12835e41b26dc0acd3cf4aad7f3bc
-
SHA256
2cfa5dceef1dd5cbcb906598ffc155f0e7b35a2f213ff884639384232b8a5949
-
SHA512
c72e359d6a0209c36070ad78dcef07bb4c52a26aad539fa540242d9c444a0efe829e4cb7ee3f4b40f1dede1532b6f1fb73ba1692147cddf96ee14326786fbf8a
-
SSDEEP
3072:UcAyMYf57esj/UChAMz0FYWfUIoZD7+c0/e7zjYoG0LkAiktIYcEI4ffZ:ayRfFeF8A5f7oZDSc02PsykARtIYg4nZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62a174b9478d5cfd57420eaf3d76ad2b_JaffaCakes118
Files
-
62a174b9478d5cfd57420eaf3d76ad2b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 320KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zaygofgj Size: 652KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewcpyzce Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewcpyzce Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE