Static task
static1
Behavioral task
behavioral1
Sample
a97517f426df2432e73646c408ee5a3c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a97517f426df2432e73646c408ee5a3c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a97517f426df2432e73646c408ee5a3c_JaffaCakes118
-
Size
134KB
-
MD5
a97517f426df2432e73646c408ee5a3c
-
SHA1
3ceeeb8585382a328c1554284acdaac7d701f287
-
SHA256
3f2ae3fbc84c8fdd257611bbbcae90500e330a84700819b40f01f7896a50623f
-
SHA512
ad3dae0317fb1ccb9597e1ac62d132422690765db2a2362271d0b8d105afc783bf5f611ce3923b072a59df85575c9b2bec2c62f528ad74608f585dd96c47801a
-
SSDEEP
1536:phU64p+sawqPTZ4pAkvjE2HvoguVFRvToS8GYHBwkWx56Akv:pp4va9TWEaDKTodzwkWx5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a97517f426df2432e73646c408ee5a3c_JaffaCakes118
Files
-
a97517f426df2432e73646c408ee5a3c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
tsqxoz Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
utc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tpofw Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE