Static task
static1
Behavioral task
behavioral1
Sample
89b0b24c99de37c7ece15aa25af02ee2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89b0b24c99de37c7ece15aa25af02ee2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
89b0b24c99de37c7ece15aa25af02ee2_JaffaCakes118
-
Size
83KB
-
MD5
89b0b24c99de37c7ece15aa25af02ee2
-
SHA1
ea3636d0d41fde45eb002c08e990420e0ff0004f
-
SHA256
174736f6a07c2f654dce2f2c735b0150b5bc3c9ff4f96981506457799248e983
-
SHA512
3be49c065f2ae446d0848729bd3183c01419cbcb8621ee19422137cdbed9ff1528e83cce1170e71d083042c824909b5fa832a9c2424de4ec173905783eefb817
-
SSDEEP
1536:j9Kos1Aepzxt9878JBy0elqxz67Dks5OizmF2Nmd2GaxW4iWM2ZnBJkMa:JKoAF8oJFWqxz6nktiwBMzM3Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89b0b24c99de37c7ece15aa25af02ee2_JaffaCakes118
Files
-
89b0b24c99de37c7ece15aa25af02ee2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 200KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vbzgrrjs Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmpkblhd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmpkblhd Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE