Static task
static1
Behavioral task
behavioral1
Sample
76b3971644f87b89cbfc0e22c4ad08c9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
76b3971644f87b89cbfc0e22c4ad08c9_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
76b3971644f87b89cbfc0e22c4ad08c9_JaffaCakes118
-
Size
892KB
-
MD5
76b3971644f87b89cbfc0e22c4ad08c9
-
SHA1
90e554a13fb914ac2f17033a08b62f24427f4adf
-
SHA256
f15d12c184fccc2ae4ecd5fd18cf87b6ebe09d3b3353cb99ce8fb807a659ad1f
-
SHA512
0bec6e68904ef52af2b0b805f23eb421f71d3eb590ac01719c15d3a2ea72168c5b9cd27dbea6ae240d614d73240cb59608f8fa51c081c9cfcca5d6d35b648bfa
-
SSDEEP
12288:lh/56aUTA0TDsEpn/Uwn/yHX7JHL4lc7FVSXi7fRZ7HEmipka:lh/56aUTAgR8QyHxL4qpVH7vEm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76b3971644f87b89cbfc0e22c4ad08c9_JaffaCakes118
Files
-
76b3971644f87b89cbfc0e22c4ad08c9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
^z0 Size: - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
^z1 Size: 363KB - Virtual size: 367KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
^z2 Size: 527KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE