Static task
static1
Behavioral task
behavioral1
Sample
a118dcd827ea43f260369ed941e68ce2_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a118dcd827ea43f260369ed941e68ce2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a118dcd827ea43f260369ed941e68ce2_JaffaCakes118
-
Size
210KB
-
MD5
a118dcd827ea43f260369ed941e68ce2
-
SHA1
10b17fe2b290a5aa8c223689d531355e74fbb883
-
SHA256
c7c50bb30e208b79f88546f71c35cc0e4f6d814d60aa641e593c2e30f304c9a6
-
SHA512
42be4d68a6fd4eed66ca3655f00e6dafc51438c3c731893b398478ba8bb0b5ca7374900da10276483ae95cc04468c08c8076a177e4eadffb918c89065748e10d
-
SSDEEP
3072:nTSLf5Z70+t66N6VACJpy1+iH2a/CgmIa82nNZSzhkcS/UGNr/F4Gi0VpDenU:T4L70+t66gVNJU8BxhuwN8FU1/uGiKSU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a118dcd827ea43f260369ed941e68ce2_JaffaCakes118
Files
-
a118dcd827ea43f260369ed941e68ce2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 544KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE