news
Static task
static1
Behavioral task
behavioral1
Sample
83336cf52503c67e1eef470946bbea1e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
83336cf52503c67e1eef470946bbea1e_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
83336cf52503c67e1eef470946bbea1e_JaffaCakes118
-
Size
640KB
-
MD5
83336cf52503c67e1eef470946bbea1e
-
SHA1
b8d46d0e90303f46f705cb46648aca9e81a1232f
-
SHA256
1cbac97dd299489ff4f011b83b5e650a1cb61c73be91aa46bd5530eb37ed51a1
-
SHA512
897fe314396cbc7ebcf499d25401c8e6179577c5c6ab7150e7c4a13037fad8433f3aaf23c3ee00760b035713ddcbdd957e91cd686a06a21c0381133e95653786
-
SSDEEP
96:nPN/vYs392D4FPXdRiDANnDCxf9PyR+u4GbCu5SmjsAXVvStDcsfA4e1DcInvX2h:n5YdgRiERDCBJXGOu5CAF4csI4k5u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83336cf52503c67e1eef470946bbea1e_JaffaCakes118
Files
-
83336cf52503c67e1eef470946bbea1e_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
mail
Sections
nsp0 Size: 384KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp2 Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE