Static task
static1
Behavioral task
behavioral1
Sample
766f8d4d8b444f81a57469f830e8ad93_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
766f8d4d8b444f81a57469f830e8ad93_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
766f8d4d8b444f81a57469f830e8ad93_JaffaCakes118
-
Size
178KB
-
MD5
766f8d4d8b444f81a57469f830e8ad93
-
SHA1
c942f5ad83bf78f1d3eca703aa6061e56fcf6ab6
-
SHA256
a1018e43a1d046997f92a219ef455bccb0ad3761d8f55a47855f94da0f9ded54
-
SHA512
9defb2def9a6c37e5e9effe769476f34812b96f701c883783ebabc5c4aa8956a605b5b3e2ccb532ffbf125edf2c3a69e2115e5b679ba13711daa090c5baf7e80
-
SSDEEP
3072:UQjQPwRTVVw4+YCxFd5ZsBf8hD4CjTxjtjnVemQT2OxMfKZd:5pRTVu4+YCJ7Cf8hhTVehTXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 766f8d4d8b444f81a57469f830e8ad93_JaffaCakes118
Files
-
766f8d4d8b444f81a57469f830e8ad93_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ