Static task
static1
Behavioral task
behavioral1
Sample
a8dc0d7c957011f06c7e6045a79b4299_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8dc0d7c957011f06c7e6045a79b4299_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a8dc0d7c957011f06c7e6045a79b4299_JaffaCakes118
-
Size
75KB
-
MD5
a8dc0d7c957011f06c7e6045a79b4299
-
SHA1
249e95c93758b111f98da20a3b22281ead8df2cf
-
SHA256
8ac918ea354ae3fbead55ea38f3aa827dcfe0bf763abcfdde8958bfe41c3f18e
-
SHA512
e4b96e2c0cedeedd7e7d4eab843119bcfb9c8e4d0d4f1b2fb54a06587bc55a3ed2d72b091df15064a585d7dee6f8fbd1b86482e4a9923193c362ac6e2a87d798
-
SSDEEP
1536:5yuqCtTAL4ZASkX+bPKrP99NgO/3a54BorrrQ:Hnxg+bPGF9NgO/324B9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8dc0d7c957011f06c7e6045a79b4299_JaffaCakes118
Files
-
a8dc0d7c957011f06c7e6045a79b4299_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 220KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ