Static task
static1
Behavioral task
behavioral1
Sample
88abbde2301d88b2a72a0cf2bc0f56a0_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
88abbde2301d88b2a72a0cf2bc0f56a0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
88abbde2301d88b2a72a0cf2bc0f56a0_JaffaCakes118
-
Size
160KB
-
MD5
88abbde2301d88b2a72a0cf2bc0f56a0
-
SHA1
4953b913d78fab5f1fa6e3c3c5208d17bc41101e
-
SHA256
5c23579be1f2f11b82cb155af6cdce8dbdbd0cb5380293ca536d0b29f677d253
-
SHA512
e914505aac8af33c6888d693e5a83ab5c46c7834adb436d109bd1b9841407b92e27ca6f2e0d02a7020bab5a42ddb370909cc58493bdde21d85686b079abe6c83
-
SSDEEP
3072:Sxecj6NmSDTxS3Tj2c+/o/AEh5zbSUhTEUcwfyAJu+1:uecj6EIQTVZbhpbhTEBytJu+1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88abbde2301d88b2a72a0cf2bc0f56a0_JaffaCakes118
Files
-
88abbde2301d88b2a72a0cf2bc0f56a0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 184KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xumjmyav Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehmfrbat Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehmfrbat Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE