Proc
Static task
static1
Behavioral task
behavioral1
Sample
8ba2f70e5502414ffa6a15fde88806e8_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8ba2f70e5502414ffa6a15fde88806e8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8ba2f70e5502414ffa6a15fde88806e8_JaffaCakes118
-
Size
304KB
-
MD5
8ba2f70e5502414ffa6a15fde88806e8
-
SHA1
a6044944b78885c5b001edee31c271ee8eb28dcd
-
SHA256
19724a109cf100e66d6dbb1b321c8b1e5e2ea691aafafed988868ae81eb4ef12
-
SHA512
9b309e6389e35e8c866dbd4ff194b790c2fdf19d7e6f6a971c893d714e4c69ec38d1b1e9cae0f613b16e7710a14b9f01ac1d4bb342f7704852812d9aceda65f2
-
SSDEEP
6144:taYwVkDsB7r9Qjte4nDWgRAkPb2GQn8xID0DMFyqveKa4k8FCMOU:taXG6MR3Pb2GLxe0DKmKvvhO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ba2f70e5502414ffa6a15fde88806e8_JaffaCakes118
Files
-
8ba2f70e5502414ffa6a15fde88806e8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.textbss Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 160B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 66B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE