Static task
static1
Behavioral task
behavioral1
Sample
89dab7804e9b60a1b5e58d47bb803b60_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89dab7804e9b60a1b5e58d47bb803b60_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
89dab7804e9b60a1b5e58d47bb803b60_JaffaCakes118
-
Size
161KB
-
MD5
89dab7804e9b60a1b5e58d47bb803b60
-
SHA1
4d9ec2697035a5114e2d7c39d36f630b41691d38
-
SHA256
46b450ac579054f326fe7254bb079e1fb323ad0ccb48b527876ad7bcde5fffe8
-
SHA512
0026b7db3802b619af0f79eb44711cb0db527328046c901cd408fca90146f895ba4b9cf8505054956e5b4c434a81052b0fb85f1f78f560de824cc3c07ab41966
-
SSDEEP
3072:Ja7GApbVumVAHi+U+E3MiRtrXidYZsoC4a/ZV7R+q1:Ja7XbVf0hdYU4gZNb1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89dab7804e9b60a1b5e58d47bb803b60_JaffaCakes118
Files
-
89dab7804e9b60a1b5e58d47bb803b60_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 280KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 944KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kysrptcs Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gtwznnuu Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gtwznnuu Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE