Static task
static1
Behavioral task
behavioral1
Sample
78b795fc9cd62798ba61a70bdae4fa5b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
78b795fc9cd62798ba61a70bdae4fa5b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
78b795fc9cd62798ba61a70bdae4fa5b_JaffaCakes118
-
Size
91KB
-
MD5
78b795fc9cd62798ba61a70bdae4fa5b
-
SHA1
35cdb8c2053d9a4088d9e0be57e4db9158e19a74
-
SHA256
98ffe2bbe7bbf5d546a293eb0cb10c5fe97239abd3f087df0d8fead75579fec8
-
SHA512
b7d26543b2b617c385a89d7e6ca22e5930fe71230333e2681af3c3f554a87b9ffb2da83a1743186639ebb9a88709435c317c6a8141db6fe66c522ae22bfb9b3e
-
SSDEEP
1536:SPQZQ3xawGfOcnJJX8rDz4BjucXr2mryYTAOum:mQ8IwFWJJMn0B1ryYTAOum
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78b795fc9cd62798ba61a70bdae4fa5b_JaffaCakes118
Files
-
78b795fc9cd62798ba61a70bdae4fa5b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Share Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bzd Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE