Static task
static1
Behavioral task
behavioral1
Sample
721bdb6f1375292d838abbb1dd253c8b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
721bdb6f1375292d838abbb1dd253c8b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
721bdb6f1375292d838abbb1dd253c8b_JaffaCakes118
-
Size
94KB
-
MD5
721bdb6f1375292d838abbb1dd253c8b
-
SHA1
46c897c83062e136485e87ffaed19c9ea41d4eea
-
SHA256
d05e0e48ab72cf2dce7e838ce75a9ca9630870515ef36c392604c2435098b567
-
SHA512
da8a81dbe0d35340329e4a2792170887878b337d00dcc138a23765c9202d820035617311b2a65cd90dfde884fa129a01ba226a23a72bc49723778a3ef6be5af0
-
SSDEEP
1536:1ktaUBcgCvI+KOocuI/GKYhzZYTcg4wotPOhr/nNgVc2oY8axg7Q3aFpGy:caUfOxaqGKYhfRwo9Vc68af3aPX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 721bdb6f1375292d838abbb1dd253c8b_JaffaCakes118
Files
-
721bdb6f1375292d838abbb1dd253c8b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
wesley Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
QQ Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2630 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
10823 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
thank Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
you Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE