Static task
static1
Behavioral task
behavioral1
Sample
a78a6061def3e5ca79dd021c3462e7fd_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a78a6061def3e5ca79dd021c3462e7fd_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a78a6061def3e5ca79dd021c3462e7fd_JaffaCakes118
-
Size
50KB
-
MD5
a78a6061def3e5ca79dd021c3462e7fd
-
SHA1
19faed2860030f8eee60a2f197d263f1e6881d5e
-
SHA256
85dd8094e37a56055ef9e8ac6e6493a420147e64769245bf62619032aafedeb5
-
SHA512
78e8258549e7ac95f98cb1c819a98e6dddd57a45cbafe63070336e4942a5804a12402e935186e73023a88beff9f87087afeb89d1160c9fb367992facb30e3318
-
SSDEEP
1536:dXlQrH+zmhzmQMEbxnLhrSpOyjXXsAb+KZncF:F2rnAqnVru97sAbJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a78a6061def3e5ca79dd021c3462e7fd_JaffaCakes118
Files
-
a78a6061def3e5ca79dd021c3462e7fd_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.WDATA Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������� Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ