Static task
static1
Behavioral task
behavioral1
Sample
877adea2f37d35ca61bbb803eeb8d1a2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
877adea2f37d35ca61bbb803eeb8d1a2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
877adea2f37d35ca61bbb803eeb8d1a2_JaffaCakes118
-
Size
66KB
-
MD5
877adea2f37d35ca61bbb803eeb8d1a2
-
SHA1
67b2409ea29f76f5e1680c54a26925d1f4ce450a
-
SHA256
d9b53aff10d74375058335b10464a7dcce784642b4eab177fc67c184ba0fc298
-
SHA512
b1e383bb25cd19d074905140871646b81a2f25b33178921eb9e916ca96f2229901a452d064c09df9f9ab26695f8e216a32624d50d00891c7e41bfbf1b0eb2f51
-
SSDEEP
1536:+eOhapdKYherYcGBPzByc+0mG4zDtI2+lco7Rf4MCMCo:+vh8tsEVY4e5I1FfJCo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 877adea2f37d35ca61bbb803eeb8d1a2_JaffaCakes118
Files
-
877adea2f37d35ca61bbb803eeb8d1a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE