Static task
static1
Behavioral task
behavioral1
Sample
84bb7e52ec01e35881619876507299c1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84bb7e52ec01e35881619876507299c1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
84bb7e52ec01e35881619876507299c1_JaffaCakes118
-
Size
114KB
-
MD5
84bb7e52ec01e35881619876507299c1
-
SHA1
610bb7d4b82b4a7d2115840c2f8a9576e63d5e56
-
SHA256
103a0a70e2c0d414c6d30f4e6614318326da618397e6a1088c7062f812789fc4
-
SHA512
63f86b213caecee3660546198280ea42673de71a5c17844ceefa310b59b154907ecad894580bd417c99526ce573406d6b715729b0072b30afb2c6e7e8e0d3b24
-
SSDEEP
192:YEwUE9FMTL5+MuyQ9AV5Eq9Hia2gQY44lj+fzARyUeDA2fLy+Nbvennq/6g:YA8BByP5BQYt+fztUmT++VGnqi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84bb7e52ec01e35881619876507299c1_JaffaCakes118
Files
-
84bb7e52ec01e35881619876507299c1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Audio Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ