Static task
static1
Behavioral task
behavioral1
Sample
7081b3f2f17718bde82b511111cf3ae2_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7081b3f2f17718bde82b511111cf3ae2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
7081b3f2f17718bde82b511111cf3ae2_JaffaCakes118
-
Size
98KB
-
MD5
7081b3f2f17718bde82b511111cf3ae2
-
SHA1
7a5d0c208e460d1779f5583a3b263b080f53af5d
-
SHA256
53da46103aca048493ccb2a74831be5b8071bb9a6b1792818ca0773525a8bb46
-
SHA512
b948c626f7a8510139eb3c903e643b5525824291e29e2bc7c5d34e36c7b3e49e166d9eb1e7b988d9175c935724725ffb846e61b012867e828608935c26941f82
-
SSDEEP
1536:EIBtQ3FAGbfOcn0F256364UvnZ6rEk74X:DBwSG6W0Fa43ULX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7081b3f2f17718bde82b511111cf3ae2_JaffaCakes118
Files
-
7081b3f2f17718bde82b511111cf3ae2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.tttt Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdddd Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dddd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
woria Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rerer Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MABIDE Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bao Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE