Static task
static1
Behavioral task
behavioral1
Sample
65ead4d35d8d5e1087d3ece366e70eaf_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65ead4d35d8d5e1087d3ece366e70eaf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
65ead4d35d8d5e1087d3ece366e70eaf_JaffaCakes118
-
Size
37KB
-
MD5
65ead4d35d8d5e1087d3ece366e70eaf
-
SHA1
4a0e9120215cb419285172d730cb342cd81be2c8
-
SHA256
0b5196fcb4ebddd97b68385336fa5a33458d9c155918defcd2cee23adfe6f0a8
-
SHA512
c99c7d2f3399abe1fedd363d1df6ae18d37e1a9970e56a23ae3f37d2a6598317042805d17275db84536020138889f53a509d4ed21ef31ad8ed763ece5994b1af
-
SSDEEP
768:rhra1qzI4c0rJE5l5x6KFFheQqT2qCXQM3iJcmP0:lWY84c0rm35NJtv58P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ead4d35d8d5e1087d3ece366e70eaf_JaffaCakes118
Files
-
65ead4d35d8d5e1087d3ece366e70eaf_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 110KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ