Static task
static1
Behavioral task
behavioral1
Sample
88676e52538bf333751cf74e1a5ec8d9_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
88676e52538bf333751cf74e1a5ec8d9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
88676e52538bf333751cf74e1a5ec8d9_JaffaCakes118
-
Size
49KB
-
MD5
88676e52538bf333751cf74e1a5ec8d9
-
SHA1
c3e21ad1e57279fbc474d15bc240f16870684d7a
-
SHA256
978ccd36aaec0ab6ec143e85e55e21f5462ab27684541f7dd50365a3645982af
-
SHA512
f9b767f3072c6329fd57ad5e3ff10d08b86d4ce3099881f8d5afedd24e2c13a2cf810c0bdb36ed8d83d5de20a394b68f908d7ccc2856cfa76c19eece16e3fd31
-
SSDEEP
768:isUXBiuMD3yhnaIUMW+x8VtAyy6Ptw6DzW+p/XlenTs1o5eSJIUGt:qBiHYj4c6D7/VQ43KIbt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88676e52538bf333751cf74e1a5ec8d9_JaffaCakes118
Files
-
88676e52538bf333751cf74e1a5ec8d9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE