Static task
static1
Behavioral task
behavioral1
Sample
76d8e898a35cf97577103bb17cfbbcbe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
76d8e898a35cf97577103bb17cfbbcbe_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
76d8e898a35cf97577103bb17cfbbcbe_JaffaCakes118
-
Size
3.0MB
-
MD5
76d8e898a35cf97577103bb17cfbbcbe
-
SHA1
d68e1bd94bad070d01de6bddeaf4f8099b677db6
-
SHA256
e58ab0d71c164507e42772e9311e2a8457a3370f1f85ee246ecc93c40b1f0883
-
SHA512
7850b38747d47dd6ee6027b2ec9d0a2ac12504f42dd411505c901f1c1360b3cb65885ee7f1ca1b65be2fefbfb00bf396fd0077e95f8454d0092e069d008d48a7
-
SSDEEP
49152:Y+vN5CltRMRXoB6b1G+UKcMWecSMhf4t64vlKbcuPSm9eK5jz9tQW:HX+tShk+UZMFAf46xPSJCxtQW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76d8e898a35cf97577103bb17cfbbcbe_JaffaCakes118
Files
-
76d8e898a35cf97577103bb17cfbbcbe_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
WeUXyyna Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3w5r6cXH Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPN7VQKR Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
96ErQ8Fe Size: 274B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7sbSPZ29 Size: 74B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
K34gO96h Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nL8jWj2A Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ