Static task
static1
Behavioral task
behavioral1
Sample
a19e2842a1ff14758167b06f461fdeb4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a19e2842a1ff14758167b06f461fdeb4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a19e2842a1ff14758167b06f461fdeb4_JaffaCakes118
-
Size
87KB
-
MD5
a19e2842a1ff14758167b06f461fdeb4
-
SHA1
54c81aa023d689b045e97e6473df605c85ce15a3
-
SHA256
e062b35e656e36d11bcdbdac7594574ed9e406434313c95c4cea060910f844a1
-
SHA512
6fd323b68bea47ac644a334f39b4a7a6cd9f2c81cd0eaacf5d35ea978b7997af4099586e5ba3caf8d3142f445c08a817f339c05caafb149d9a27fccac739acc5
-
SSDEEP
1536:u6mbaGDtzh+ZUTLeyJ1YOb/ym8h8wF5lF9h3G4qVKcRsOO48nzrEcst+Kp4sDLr4:u6qaGDxh+ZUTLeyJeu+zvWVVFsOYXSC1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a19e2842a1ff14758167b06f461fdeb4_JaffaCakes118
Files
-
a19e2842a1ff14758167b06f461fdeb4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.data Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ