Static task
static1
Behavioral task
behavioral1
Sample
a2a00561a606f3c015576b2cab3ec5c9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a2a00561a606f3c015576b2cab3ec5c9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a2a00561a606f3c015576b2cab3ec5c9_JaffaCakes118
-
Size
1.1MB
-
MD5
a2a00561a606f3c015576b2cab3ec5c9
-
SHA1
bb25837e5cf02bf91590e3b021950f63d16a46ff
-
SHA256
15718bbf2491bd0c28f0916999bfd5dc9cf80d4d3e674f04678de4dad6a0855f
-
SHA512
f5268cfb0c6ba397f4143940efb7c9ee90893dbf444953c466e063b325e54d68a1a4c95fa90e6f04c68f42a563bd9703e87d37bef4183b59d151d1bb67063238
-
SSDEEP
24576:pXQYBGzSJvuaWl52CWcNPEWw/2M+iPRjb97YTjbQ0L7b4ZyF6soo79Ts:pXfGz8/+cCWcmWG2VoRjb97y3Q0L7b4N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2a00561a606f3c015576b2cab3ec5c9_JaffaCakes118
Files
-
a2a00561a606f3c015576b2cab3ec5c9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ