Static task
static1
Behavioral task
behavioral1
Sample
ac6bb9e601465ff45d720f6a88eb13b2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac6bb9e601465ff45d720f6a88eb13b2_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ac6bb9e601465ff45d720f6a88eb13b2_JaffaCakes118
-
Size
297KB
-
MD5
ac6bb9e601465ff45d720f6a88eb13b2
-
SHA1
b189f5acce9ffc88aab29b87e23ee90df3b28da9
-
SHA256
80e587c1556ff6657c52953b55062b6f74d851fece72acc180f15531b2feaa91
-
SHA512
2423ff7195fc7cc8fe09dd364bbef20380a24bf319bea1b6456e3a4e2bb4f3aa4f71e38d57b6b04af74467f6af17a2c89564e2b1b6a54679f228d1fbc3d14178
-
SSDEEP
6144:QH1HtOEQ5W+LzIvui0WE4yV2RnVWK4k8EVWsmHhW:stOJY+LDivEnEWJE7mQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac6bb9e601465ff45d720f6a88eb13b2_JaffaCakes118
Files
-
ac6bb9e601465ff45d720f6a88eb13b2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 72KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ