Static task
static1
Behavioral task
behavioral1
Sample
a10edc33393b8bdf2fe6bbb58cb32857_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a10edc33393b8bdf2fe6bbb58cb32857_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a10edc33393b8bdf2fe6bbb58cb32857_JaffaCakes118
-
Size
306KB
-
MD5
a10edc33393b8bdf2fe6bbb58cb32857
-
SHA1
b315baa6bef6c5de3a07f06a7f4863f7606f96d8
-
SHA256
03945f5119c7c614ae0af817a66daf0a98be40d774b7ebbca30e44bec91eb1f4
-
SHA512
95142c8e7661dc8a9ed36bce84faa67a7363c2d4c94cf72e2e2d0a6f2b9a7403029ef2cb0793278f43d810a038c2a5bfee0563bbbd4d10722c9a4da014833b57
-
SSDEEP
6144:f/poB2cloC0gBESR0yguezcromARiZFWwRW/TGezTewVCuwZfq:f/aB2cK3kr0pUdYiZ74hHMLZfq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a10edc33393b8bdf2fe6bbb58cb32857_JaffaCakes118
Files
-
a10edc33393b8bdf2fe6bbb58cb32857_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 305KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE