Static task
static1
Behavioral task
behavioral1
Sample
ac161f30d03a81ef3f5b00ad84fef00f_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ac161f30d03a81ef3f5b00ad84fef00f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ac161f30d03a81ef3f5b00ad84fef00f_JaffaCakes118
-
Size
68KB
-
MD5
ac161f30d03a81ef3f5b00ad84fef00f
-
SHA1
3098065443b5c338c47c26dd4c60afe62a513969
-
SHA256
c72d76918247962e19e96f328d88ff63c7f811363e06287525e24f879798edec
-
SHA512
67d0f433458b853d8615ac8c612c594c61d05b4051324c05a3ba890dd1dea912589c0874026721cfb2f413791889d4f986df38c85264892fda849be43a444c85
-
SSDEEP
1536:ZEy8rpCgNPbIsLM3XKodXr7/09mWy1tAd:uLCgFICUXp5n/2mWCtAd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac161f30d03a81ef3f5b00ad84fef00f_JaffaCakes118
Files
-
ac161f30d03a81ef3f5b00ad84fef00f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
jj Size: 2KB - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7wlqeopb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
n Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE