Static task
static1
Behavioral task
behavioral1
Sample
9ff6c9bf81206b14ed4b09ec7f1e0fd1_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9ff6c9bf81206b14ed4b09ec7f1e0fd1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
9ff6c9bf81206b14ed4b09ec7f1e0fd1_JaffaCakes118
-
Size
172KB
-
MD5
9ff6c9bf81206b14ed4b09ec7f1e0fd1
-
SHA1
aa88ef70a3e452329598633fdbbf8964c2fee791
-
SHA256
c8b5f6648cdbbf1e103a32fc7258fcbdaab5628d93ec30cb3734c2aa09f4737c
-
SHA512
ddb8f7f645219bfe05b14dab207987ae95a9af94b1da19a7191d9edde2c3df8c640682295f3829b1f4c5fa6dd3bc2c3fbab48ee4c82cd5ec15bea9edd8c92f11
-
SSDEEP
3072:z7XAA0vXXGNOrwpv/+7LvXXGNOrwpv/+7LvXXGNOrwpv/+7LvXXGNOrwpv/+7Lvi:HAAiXX+vm77XX+vm77XX+vm77XX+vm72
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ff6c9bf81206b14ed4b09ec7f1e0fd1_JaffaCakes118
Files
-
9ff6c9bf81206b14ed4b09ec7f1e0fd1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE