Static task
static1
Behavioral task
behavioral1
Sample
ab97c6c6b2c0b026be1ee4ba5d61f39a_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ab97c6c6b2c0b026be1ee4ba5d61f39a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ab97c6c6b2c0b026be1ee4ba5d61f39a_JaffaCakes118
-
Size
49KB
-
MD5
ab97c6c6b2c0b026be1ee4ba5d61f39a
-
SHA1
7190a445e54ffb2345966f5fc53aa661c43445c2
-
SHA256
4d476de5755ecf2d556b7fd639ad32e913040ac28bb458d2f9d1d30005c439d4
-
SHA512
481717a0e65f81accbe3b9bc896e9e2e96b0141ba2606c67d2f613ff697347b0dc63f46111b45585063d91d5a8a07daf17d420c736c61d6275ce5926399dd210
-
SSDEEP
1536:P8Iy7oCtS0poTnxHcCTb3DYRhZeYoZER:P8IGXiERfeYoZ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab97c6c6b2c0b026be1ee4ba5d61f39a_JaffaCakes118
Files
-
ab97c6c6b2c0b026be1ee4ba5d61f39a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�$�"0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�$�"1 Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE