Static task
static1
Behavioral task
behavioral1
Sample
93c08f7104c737242a9e85aa78c4ef5d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
93c08f7104c737242a9e85aa78c4ef5d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
93c08f7104c737242a9e85aa78c4ef5d_JaffaCakes118
-
Size
65KB
-
MD5
93c08f7104c737242a9e85aa78c4ef5d
-
SHA1
be7b461f13d531d351623588e70ee8e74be0a523
-
SHA256
09f8eb2251327f5f532923d2eed3fe48d26dddd41f3e62d8c50239ea1d312657
-
SHA512
5c700e39b743d018e0d27929705d26036e9484dbf0ca0debc4ffdfc07003a858feb1b0c894a984940b4d3409f8a707e55adf528b26533110be8b720a67c1686f
-
SSDEEP
1536:bcDL20SwCn3yltK7PoryRIA7ynSRcDsZzO3IeiQMoryd:mL2rwHlQGQ0nSewFexrE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93c08f7104c737242a9e85aa78c4ef5d_JaffaCakes118
Files
-
93c08f7104c737242a9e85aa78c4ef5d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
8znn Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gksq Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qgyyg8 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE