Static task
static1
Behavioral task
behavioral1
Sample
62e01432d660fd53a0e34e7717945d95_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62e01432d660fd53a0e34e7717945d95_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
62e01432d660fd53a0e34e7717945d95_JaffaCakes118
-
Size
98KB
-
MD5
62e01432d660fd53a0e34e7717945d95
-
SHA1
b3e547d84a96a3ed47054d9f1e5bc6b80c7df8f7
-
SHA256
2f7797334a6894c52e60ea1f252b65e5cab5aae6d5ba1acc4d3137fe77e53099
-
SHA512
70afd8804ad3162873ce31b8bce8efad9f7adc3900e5f71fa47d45278350040d007a9858205dbfdcbab96e7af6c148a47d8fe910c3049abc740bd7aee17548b3
-
SSDEEP
1536:ZccC2wecXWJ9kFv+OSh3ky2E+xqTKn9kYYTzcemdBhKcE/Ovd:ZnQecXC4SWyuxqTckdfABhKFed
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62e01432d660fd53a0e34e7717945d95_JaffaCakes118
Files
-
62e01432d660fd53a0e34e7717945d95_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 198KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE