Static task
static1
Behavioral task
behavioral1
Sample
88c0d6ea432ba19939d94785cc62f600_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
88c0d6ea432ba19939d94785cc62f600_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
88c0d6ea432ba19939d94785cc62f600_JaffaCakes118
-
Size
157KB
-
MD5
88c0d6ea432ba19939d94785cc62f600
-
SHA1
ee87a826ed3c20b543451a9bb885107b8968e678
-
SHA256
c98d85461071cc4d8b175b99473986e089b879ec8e39ff6019723cb3be845528
-
SHA512
de71cfbe27c419255d5995aa5962338fcc382020b474e39055dcddf957273dd041d44bec7fb528e52201f3dc9bc1513b4a9369ae50e044aa23ced34bd24fab04
-
SSDEEP
3072:i7XGS3nM4Pc0IGyIWg2JxHeJ8KwPyw4jwbve5V9tysE+HT:iKSnaGyIWg2JxHfPPyZOc9lEw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88c0d6ea432ba19939d94785cc62f600_JaffaCakes118
Files
-
88c0d6ea432ba19939d94785cc62f600_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 260KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ueyfwreo Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crrrybcd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
crrrybcd Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE