Static task
static1
Behavioral task
behavioral1
Sample
8643bb42b0804a351bac42ed9f3e29cd_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8643bb42b0804a351bac42ed9f3e29cd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8643bb42b0804a351bac42ed9f3e29cd_JaffaCakes118
-
Size
83KB
-
MD5
8643bb42b0804a351bac42ed9f3e29cd
-
SHA1
bb2cd1186e6c4a49980f4a40aee7197ad560c5bd
-
SHA256
57250921f08016156dacb62c618551f011e4cd2cb1a2276412a5f5ad6935f54e
-
SHA512
2dcd9318d62407dbbaa7ccb5fefe3e4500c62cfd92e923cbe36f7d34f484d19d285ae19fe22f9a09484b13a5c675362c0996b6a7d881f9480fddad670dad7986
-
SSDEEP
1536:uaILQfM42fMej65XBjdC8ionXnNzobIcyKQjJhX:ubl42EU65qhQnWbIcyKOx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8643bb42b0804a351bac42ed9f3e29cd_JaffaCakes118
Files
-
8643bb42b0804a351bac42ed9f3e29cd_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
qk Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
buwpw Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
r Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE