Static task
static1
Behavioral task
behavioral1
Sample
a0d1664e4a67dfe99611eebbc7e0a590_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a0d1664e4a67dfe99611eebbc7e0a590_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a0d1664e4a67dfe99611eebbc7e0a590_JaffaCakes118
-
Size
162KB
-
MD5
a0d1664e4a67dfe99611eebbc7e0a590
-
SHA1
29249b6901108b2906048f35f2db11368b273016
-
SHA256
18c42b6ba718d8743b78dcc6a52e9c57cd54da3b87a0f19d7086db5ba0f9aa1f
-
SHA512
c2708c9a113c50eaf7a4e338f9603b6483d3bd0f38c55c6818d06909739ecc2a7b76e0217317ddddc9f40a28627fd882ccea296c1772d3ddc3a219ca1985cc0f
-
SSDEEP
3072:sZACvSM6st8Qr7yEu1PGkiOvy8QDLr7y:sZs+ti1GkiND
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0d1664e4a67dfe99611eebbc7e0a590_JaffaCakes118
Files
-
a0d1664e4a67dfe99611eebbc7e0a590_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
fzur9xc Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
d5w Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE