Static task
static1
Behavioral task
behavioral1
Sample
88ffcc2ee8cfca4ce97ca414a4c5bc5b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
88ffcc2ee8cfca4ce97ca414a4c5bc5b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
88ffcc2ee8cfca4ce97ca414a4c5bc5b_JaffaCakes118
-
Size
81KB
-
MD5
88ffcc2ee8cfca4ce97ca414a4c5bc5b
-
SHA1
b6c9c5efcc522f9989e79229fdaa3e158a1fe38e
-
SHA256
46b4f62aebadbb8b681ab02d655b9381a2aec1260b4961cc89cfbfe4d1dd1658
-
SHA512
9081056b1b321dc08ab54c48a2b0e249635f60b25c3f5350c9e36fb46fe375a0f6a1cc9ec059c054634aa7127852fae5a44c8f5643b1a5b22f210b46ed77bc7b
-
SSDEEP
1536:APO89eX2pc3dM2uSdenbQ40Eh1ABErCaHheNN3IJTscanMdxoqa9:mHwX2S3dM2MbNZ41aHYNqJTxQ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88ffcc2ee8cfca4ce97ca414a4c5bc5b_JaffaCakes118
Files
-
88ffcc2ee8cfca4ce97ca414a4c5bc5b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
htomaota Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ