Static task
static1
Behavioral task
behavioral1
Sample
75d17fc2b0f40130e4bcc1df04665ea6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75d17fc2b0f40130e4bcc1df04665ea6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
75d17fc2b0f40130e4bcc1df04665ea6_JaffaCakes118
-
Size
104KB
-
MD5
75d17fc2b0f40130e4bcc1df04665ea6
-
SHA1
823356453fc07b294f3c89a9d16a78da14b4a3e3
-
SHA256
f643c9a0b093fb37111ac0b7099b21c4a99ee63b6cd58fd2e2f6a38ab8977835
-
SHA512
b35d0e16af57646e8f53fb4c1e35e94081fc4ff63810d47abf859f0befbf1ae906bb13be049040e99b66270babe31c8d4002410751c7ebd2409bc292d787ccf2
-
SSDEEP
1536:B7bGyt49uqQN/69YI3GjNwrZOLYk5VzomZC+yg28kQRwvH3:B76PRQN/6qNwdOLYod6Hpp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75d17fc2b0f40130e4bcc1df04665ea6_JaffaCakes118
Files
-
75d17fc2b0f40130e4bcc1df04665ea6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
gaflld Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7di8d Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bti Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE