Static task
static1
Behavioral task
behavioral1
Sample
97190ca27b7dd0f8fda50037cfd84a2a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
97190ca27b7dd0f8fda50037cfd84a2a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
97190ca27b7dd0f8fda50037cfd84a2a_JaffaCakes118
-
Size
21KB
-
MD5
97190ca27b7dd0f8fda50037cfd84a2a
-
SHA1
08a1e35b72406ff23da905a35ee5117e1c11894d
-
SHA256
acb7af53bc0c17ee34b2ad63ea155c495087ef2f08b2589bd80d54cc414b7b20
-
SHA512
b4619218c0106237ce6d27b4b1f7e8d05a911f2e95ccd1e66ef1c13e2bfb106735ec8745cd95b4ce5654828cfb5cfde250921b8fedc9a9213d70e758b06f3a71
-
SSDEEP
384:EecGSM4hJzJZ4+VYachxtHh7CtRhOGuEsNtR/EWQ8my98/8WFW9W:yBhTq+Vmhx7p/7f5nZin
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97190ca27b7dd0f8fda50037cfd84a2a_JaffaCakes118
Files
-
97190ca27b7dd0f8fda50037cfd84a2a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 546B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ