Static task
static1
Behavioral task
behavioral1
Sample
a7865ef29039a50346ead6985053772b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a7865ef29039a50346ead6985053772b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a7865ef29039a50346ead6985053772b_JaffaCakes118
-
Size
127KB
-
MD5
a7865ef29039a50346ead6985053772b
-
SHA1
c924b164b360f38c1c29be8e433d5f3da9402275
-
SHA256
ffa3f593616f9b0627d53e1d4685d1a47b388f09229c088e3e37ad2b3a066c53
-
SHA512
e921695ff59b827ac1c1adc76934e86920cf6a1b73de47e21dbac202856475ee557bbd3f3466f1342060210524c2e0de20ec691097e3920546f23054649e8d98
-
SSDEEP
1536:bt1KiJbqIiAofUseuJQn6EllZEA3Md0kBemTuG2mGIYqK8J5O+MoJk5e/2G9WGSU:/E/HeuKlZEGHS3XG3qJgg5/2GnWtUxNX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7865ef29039a50346ead6985053772b_JaffaCakes118
Files
-
a7865ef29039a50346ead6985053772b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 896KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE