Static task
static1
Behavioral task
behavioral1
Sample
976b1525ba01cf4fb41e125e0cce81f8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
976b1525ba01cf4fb41e125e0cce81f8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
976b1525ba01cf4fb41e125e0cce81f8_JaffaCakes118
-
Size
32KB
-
MD5
976b1525ba01cf4fb41e125e0cce81f8
-
SHA1
9c9bd52d87ae511955cd67720f7e68ab008d1191
-
SHA256
a870f33e5ad20726ff5481586cc6a531fa295416048990c6ac24c10252354d57
-
SHA512
dee492fb02c28efb6455480f2831eb647e3f5cf5ac0fba7a30ec10d5594ea235cf70b3e6b7b0c79f3a28065ac7d7906d581b3bdc693b4dd4a918a7d71cc7fed0
-
SSDEEP
768:t64A3hdNXiyYR+WwlMZnJ6eRGPwgDDuv6kjvsD/GrVh0e25K:tk3hdNXU8lMZY1GCgErCz2g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 976b1525ba01cf4fb41e125e0cce81f8_JaffaCakes118
Files
-
976b1525ba01cf4fb41e125e0cce81f8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
2nrpisg Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jcpm Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lsvt Size: 874B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE