Static task
static1
Behavioral task
behavioral1
Sample
7259fa019763ab113d2d311c20797ede_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7259fa019763ab113d2d311c20797ede_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
7259fa019763ab113d2d311c20797ede_JaffaCakes118
-
Size
79KB
-
MD5
7259fa019763ab113d2d311c20797ede
-
SHA1
8505cbfd25353b72fb7e838f31d1ca30d8df814f
-
SHA256
06acb649e2107588a3d95eb8ebcc36f0ca6f1c1f75c0e970a9d9178887ab19bd
-
SHA512
579a12e4b77ce9848404f0a7d98f477c330177799fc6e81cf6bf284852a498d3890a3fe73c91d713a28bd28f196cf2432d167a3b7972451c61149eaf4a55c4c7
-
SSDEEP
768:9hUMny03MYWbxX2BwwMLxgZXzF9txhTjCBT1iNGc5PM5PBRDf6bwyuob5sQ2DV2i:3y03EF2Bwwn/DfTjeiRPwZeoob/2DV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7259fa019763ab113d2d311c20797ede_JaffaCakes118
Files
-
7259fa019763ab113d2d311c20797ede_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE