Static task
static1
Behavioral task
behavioral1
Sample
9588e05ef2149a7959a6a2849bd70c64_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9588e05ef2149a7959a6a2849bd70c64_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
9588e05ef2149a7959a6a2849bd70c64_JaffaCakes118
-
Size
57KB
-
MD5
9588e05ef2149a7959a6a2849bd70c64
-
SHA1
af364cc6b6a6e8ec82633bf4cafb9f821905f0ec
-
SHA256
2073833a57206590980fb7c12e48cc877639df3bc99b521b60c0afbe4912bf46
-
SHA512
676986b593397a2e0322ee168d2e45a688c4925e809c785f303331dfb04c122f18e06b77290e9b36fd9013ac5ff40ec4617a7a02f72d9478896a061535b80e5d
-
SSDEEP
768:aNDwHpCD+vRc0KOMRZ2Yu4RSUTyVqpN3DhQG3qkOSRL5c7rywjR4RkDB/s/hQG32:aqCKZc0Kv2YJnTyk7FDlOSaBjR4yBaDm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9588e05ef2149a7959a6a2849bd70c64_JaffaCakes118
Files
-
9588e05ef2149a7959a6a2849bd70c64_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
o Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fxporz7 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qdy8tm29 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE