Static task
static1
Behavioral task
behavioral1
Sample
a6acd36dd97cf215f559cc7278cec1ae_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6acd36dd97cf215f559cc7278cec1ae_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a6acd36dd97cf215f559cc7278cec1ae_JaffaCakes118
-
Size
294KB
-
MD5
a6acd36dd97cf215f559cc7278cec1ae
-
SHA1
037ab2e5b3355e8c4daa6361b86f39b4d2096d0c
-
SHA256
7de8d9846a058f67bf793707feda8eb60b7e4e549f94b2f0a89732f9d31392c3
-
SHA512
321af921e63b224e226831c9199e4afc5e2bc63a69e9b1597a21f187add926f723a30b7479cbc9f762053633f8cef3134d5f5076601c849549ab257e12363369
-
SSDEEP
6144:+U40VjP9lI7at4VJzA4m8M0LZUsJNDJTp20qyHDVTHGFDYRk/z44:CciaOXe8hZUsJXTXqyHDtHIp84
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6acd36dd97cf215f559cc7278cec1ae_JaffaCakes118
Files
-
a6acd36dd97cf215f559cc7278cec1ae_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 257KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ