Static task
static1
Behavioral task
behavioral1
Sample
a0a42ee00f21dd0f9c081d9937e15d89_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a0a42ee00f21dd0f9c081d9937e15d89_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a0a42ee00f21dd0f9c081d9937e15d89_JaffaCakes118
-
Size
183KB
-
MD5
a0a42ee00f21dd0f9c081d9937e15d89
-
SHA1
37e8f2d72d71577e957767755171af6fbdc2924e
-
SHA256
8fe3c6d7269f3c34ae738073f182a97b6f4a8f5a3965713b6eca6d96008c9a5b
-
SHA512
67e2311868568d672fa559ecc3bfcff96fdf17e945ba213d520982ef1db521c7b7fcab645010854898f8588d15ca4e396a6fb04951370fd8405fbb0495567f3b
-
SSDEEP
1536:UxCfrINs+JfOvYhyCCgc6WF1kCx0XO0rBxzjjNvGZJsP8+:Uwfr5+Jft2gl0Z0hrBxnjNsB+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0a42ee00f21dd0f9c081d9937e15d89_JaffaCakes118
Files
-
a0a42ee00f21dd0f9c081d9937e15d89_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
xsk Size: 3KB - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
agt79 Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
x7tjbaaw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE