Static task
static1
Behavioral task
behavioral1
Sample
a1efbbe3346c7008bd56eab10c4da7fc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a1efbbe3346c7008bd56eab10c4da7fc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a1efbbe3346c7008bd56eab10c4da7fc_JaffaCakes118
-
Size
53KB
-
MD5
a1efbbe3346c7008bd56eab10c4da7fc
-
SHA1
2d3c86e75b552317b31e79cf0605db4747d40615
-
SHA256
b24b478e270fd8a388c06e1c4235efed061cb4efe15e878d733d2cd3cc0e3349
-
SHA512
5ffa259124308e07d0b00431f00b68be03a9469edb33c608be32c5609baef9492db5fb066f637b1e53175ebb5c2f130a3af7da50cbc68c763347fcc8aaefdb5a
-
SSDEEP
1536:DxIlvfp+7no383w4ow3rg6+tOaZD9jKu8w3d:aVfp+7nosbprg6Ti9jZ9d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1efbbe3346c7008bd56eab10c4da7fc_JaffaCakes118
Files
-
a1efbbe3346c7008bd56eab10c4da7fc_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 691B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE