Static task
static1
Behavioral task
behavioral1
Sample
79188b460cd3f513e2b1dbc12c546940_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
79188b460cd3f513e2b1dbc12c546940_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
79188b460cd3f513e2b1dbc12c546940_JaffaCakes118
-
Size
202KB
-
MD5
79188b460cd3f513e2b1dbc12c546940
-
SHA1
a489730b9992cb14fee6f2f5e9cf6e0166b7ca61
-
SHA256
394d92dd38ce4b104f576b4b037848ca1ab024bd1c62f734aebefe39ae5f3b08
-
SHA512
412a1547eb59712f2a89e92f964ce619e81aa4da62839df981eb6bf39cf4217036e201baf9c5a5e40c91da2d15e1581d1721ce0085df491f84560d635cb9f14c
-
SSDEEP
3072:3sHh4aP26Ydlm0IqLm9Qdxas2INFLYv4Xv90q1pBrx:3sH2o26Ydlm0IiSoPb/931pf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79188b460cd3f513e2b1dbc12c546940_JaffaCakes118
Files
-
79188b460cd3f513e2b1dbc12c546940_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 35KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ