Static task
static1
Behavioral task
behavioral1
Sample
a8f8016f23194a78d7a23e6f0c3ae110_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8f8016f23194a78d7a23e6f0c3ae110_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a8f8016f23194a78d7a23e6f0c3ae110_JaffaCakes118
-
Size
72KB
-
MD5
a8f8016f23194a78d7a23e6f0c3ae110
-
SHA1
6c4cd74fa160eb8353ffc6b0653a353cff1ec343
-
SHA256
4178b8e3db703bedc7c5de593c54ed750feeeed6d116526e766e2ce212722a79
-
SHA512
93b008d47d70d1fff00a97c79f62ceab35df19c9c45f59be0c68ddeeadf7d69ece0ba1cecc9df3518380d1c95f307574f434a44b93da5d2aef62024027441b55
-
SSDEEP
1536:q62Crd5MOxoelHFMbDpezA8GrSCFLCg7BN6evkjCA61l7VWHHVInAvFc:qurtoKqMj+SALhQevEC1G1In3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8f8016f23194a78d7a23e6f0c3ae110_JaffaCakes118
Files
-
a8f8016f23194a78d7a23e6f0c3ae110_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 249B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ