Static task
static1
Behavioral task
behavioral1
Sample
a7e6b7a0ec8f8363f5069510732cc1fc_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a7e6b7a0ec8f8363f5069510732cc1fc_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a7e6b7a0ec8f8363f5069510732cc1fc_JaffaCakes118
-
Size
33KB
-
MD5
a7e6b7a0ec8f8363f5069510732cc1fc
-
SHA1
e947474863dd4ed1b6850832921bdc284977f8d7
-
SHA256
df2cc7f5da2188607971e45030e65c3b71244c868d47ce94766039cff7db98b8
-
SHA512
dc6606ab00fc96eff40cf3ca2697512c702e05761b6eb4f83022e5e3e1085127bd6e52b18d7c66e913defe20477a2c57ed252b62dd10ceb8651c7d9ce8080108
-
SSDEEP
768:rwsU8iDR2lleK79M0HxeiC+kP5mDSr5kRMULXm:rLUelHyhVx5m48LXm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7e6b7a0ec8f8363f5069510732cc1fc_JaffaCakes118
Files
-
a7e6b7a0ec8f8363f5069510732cc1fc_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ