Static task
static1
Behavioral task
behavioral1
Sample
a886f482101517f52aeff80229f48e36_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a886f482101517f52aeff80229f48e36_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a886f482101517f52aeff80229f48e36_JaffaCakes118
-
Size
94KB
-
MD5
a886f482101517f52aeff80229f48e36
-
SHA1
b788baa7c25d36c3c194b0dbfd35af3f1f33e8fc
-
SHA256
ffd31432f2612a4ce3487641a6aef70fde9108bc13f620d68d3082a1367513eb
-
SHA512
db375ca938ec0eb14a33aa2a11ed2e77c0328f481b39fe1264f850322e837bbdb1b41ad8da1bfd4fdc8f80b0bc48cd7e695968e12e4972ef6df9a3197fa39aa4
-
SSDEEP
1536:cP+4EB+FMyBqLt1MLPT4YTWdb8C42z+4Yh7nn+PSrEFN0:cP+4Eg5qL4PT4YTWdwa+4YJn+P9H0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a886f482101517f52aeff80229f48e36_JaffaCakes118
Files
-
a886f482101517f52aeff80229f48e36_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ