Static task
static1
Behavioral task
behavioral1
Sample
84320b053edd2c5d43a1a194539359a6_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84320b053edd2c5d43a1a194539359a6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
84320b053edd2c5d43a1a194539359a6_JaffaCakes118
-
Size
71KB
-
MD5
84320b053edd2c5d43a1a194539359a6
-
SHA1
d653ea266d09e2d7fddb93ff63efa4ac1142a493
-
SHA256
c804d7179e2b563963de987798b10ecd5331f3d74d01a8efeb7b5496617b98c2
-
SHA512
8bee7e5c8de6c88b5d901277c347bb0b6e0135858e479f7b5317fc89a0d55dda17f1af1ccf565683a17dbcd2547f3ba2b99d2d90092ae6fc0120cf4767391630
-
SSDEEP
1536:kB088FB7wvz1bVP9fD9CChw03ZxFHJh+nZUKaJp5zgWqp8BsUSW:kB0DF5yrPhcoB3ZrAZULH5zgWVH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84320b053edd2c5d43a1a194539359a6_JaffaCakes118
Files
-
84320b053edd2c5d43a1a194539359a6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 191KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE