Static task
static1
Behavioral task
behavioral1
Sample
b578e70eb2a7284d7d96829cd68c2f4b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b578e70eb2a7284d7d96829cd68c2f4b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b578e70eb2a7284d7d96829cd68c2f4b_JaffaCakes118
-
Size
97KB
-
MD5
b578e70eb2a7284d7d96829cd68c2f4b
-
SHA1
09df33ab5f01f01e325e390ae7cdfa39a9fd7a88
-
SHA256
f123c76cbbfd48788cc9f6d8ea5bee2a76c4a5c8b196d57dac41c4e9f8108f61
-
SHA512
de43a84e66c0afded1ae123f7d680c6b40ef2698d51c0ab60187ebf1d3e86e5b9724744082eeb88c1b2da2861a73a6ba88468ed2d4f3ef8fbc6b0d1af0a53a18
-
SSDEEP
3072:JGyIhFAhNAkobSVaFAto0fdv1nl4bfCpaL9y3tFhTYF:JGqhN0bnFAzdqLs3ThTYF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b578e70eb2a7284d7d96829cd68c2f4b_JaffaCakes118
Files
-
b578e70eb2a7284d7d96829cd68c2f4b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 126KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE