Static task
static1
Behavioral task
behavioral1
Sample
ab5a0a76a4143d49dfad3530da041dc9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ab5a0a76a4143d49dfad3530da041dc9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ab5a0a76a4143d49dfad3530da041dc9_JaffaCakes118
-
Size
30KB
-
MD5
ab5a0a76a4143d49dfad3530da041dc9
-
SHA1
b7790a4c644f7fa5f0ae9635c02ef59850d125c5
-
SHA256
b8c5fe718e9ecbf14f6a60dd7c4a0bf9cc19e6816297b063399e3312e6d629d5
-
SHA512
42d00e3fc0b72c261cc3f85993bc7a3233c6d1d66e3e0b1debfd5799fae6b75954bbf5c52e71693c9cec6f746c6326d547fd006b48a4e1a4fedeade494197844
-
SSDEEP
768:Re6rDrM887jnM+EmwgLhSxyYGSPXIWwe/fnbzw64:RdIznk6qXNPL/vbzw64
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab5a0a76a4143d49dfad3530da041dc9_JaffaCakes118
Files
-
ab5a0a76a4143d49dfad3530da041dc9_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 181B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ