Static task
static1
Behavioral task
behavioral1
Sample
ac83f286923a1c7cfa2641e04f3d7c78_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac83f286923a1c7cfa2641e04f3d7c78_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ac83f286923a1c7cfa2641e04f3d7c78_JaffaCakes118
-
Size
86KB
-
MD5
ac83f286923a1c7cfa2641e04f3d7c78
-
SHA1
80f01fdc4a8bd5bcbc1e67d197d4bbd1f904c33e
-
SHA256
540e1c1f9472d2199bd35d1e52c290ba2ea45c2d152a9af69c26da4f3fe473ed
-
SHA512
62842078f7b6be0599bb28adcb2b71b95e215a9f054340067a974dd6ae13e8665d5fb668816789d99e2934bcbe6c5f44e3b18d3a636af2e451666147bf69bc5c
-
SSDEEP
1536:I6LblE9pl0R1l4xBeY2yxdpA21eTDU27ywxy32TTzdEktLb:ZHlsg1Cr2eO2cXU+J22x3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac83f286923a1c7cfa2641e04f3d7c78_JaffaCakes118
Files
-
ac83f286923a1c7cfa2641e04f3d7c78_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE