Static task
static1
Behavioral task
behavioral1
Sample
8bb6c53d8ea6e3d7500264d73484b4db_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8bb6c53d8ea6e3d7500264d73484b4db_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8bb6c53d8ea6e3d7500264d73484b4db_JaffaCakes118
-
Size
1.6MB
-
MD5
8bb6c53d8ea6e3d7500264d73484b4db
-
SHA1
df8c85df25d5e386ac1a4109594b63139bf19971
-
SHA256
b39d703318b89be08b1de859b1db1751cf2293d3bebf15c5844fd2eb436fd71c
-
SHA512
ff18b3b019983af596e5aff018c2d9a987e6540a7405ed9962fec25baf526e127d08a67916590d091507e0deecf0a075fac9f3f2967c9eb721f657cc4a2478fc
-
SSDEEP
12288:SOgmJNgqOni9Na2U1KVbY+VLgdvXrKeogm/XfQZpcpmSBiTnthaIX2r0+kyhiIoJ:STscGaUbZoXr62GI0aac2rW/v57l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bb6c53d8ea6e3d7500264d73484b4db_JaffaCakes118
Files
-
8bb6c53d8ea6e3d7500264d73484b4db_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ