Static task
static1
Behavioral task
behavioral1
Sample
a97706e4e1f16518c223c62461ab1faf_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a97706e4e1f16518c223c62461ab1faf_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
a97706e4e1f16518c223c62461ab1faf_JaffaCakes118
-
Size
32KB
-
MD5
a97706e4e1f16518c223c62461ab1faf
-
SHA1
48ced7fc6b593f7081d957d81b112a4f901012b6
-
SHA256
ee84b80185c92332db2c6af6c1c40676bb2c4d5f7481bcbaaad1eac9de2cb20e
-
SHA512
8c2c0add0a8fd9c89680d45adb6113460860dde106cd7ce0a2e2e16ad5a746e33a6f782314712efa568a39ea9234e8ff750944240f27360cddc34e5ff99f7650
-
SSDEEP
768:ZxRjyShrXT2Y+uH1whjdbxskeZxnUfTUfCS:fRj/rXqY+46dbg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a97706e4e1f16518c223c62461ab1faf_JaffaCakes118
Files
-
a97706e4e1f16518c223c62461ab1faf_JaffaCakes118.dll .js windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE