Static task
static1
Behavioral task
behavioral1
Sample
b1b9dbb1fe9a17c3bd2788a7de8f7004_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b1b9dbb1fe9a17c3bd2788a7de8f7004_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b1b9dbb1fe9a17c3bd2788a7de8f7004_JaffaCakes118
-
Size
25KB
-
MD5
b1b9dbb1fe9a17c3bd2788a7de8f7004
-
SHA1
a297c8f9b5bc574ddc3044494d2aec305447b4d6
-
SHA256
cce6b59c0c2debfe6940414815bee6efd3ea244c26bd029d1211256db23d8cfc
-
SHA512
e51c69b1796f3f4c4bbbd6dbe94b29002e1f8ef974fc2051bbbe143ee5136c0b40a271f5f5732dcdec979b956c79a538956628ff72c6c6c2cf007fed386a5124
-
SSDEEP
768:0TLTQfPE7n68iqobtrKMiO0adfTe8vxB/v:06Q6BttrriI5S8vv/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1b9dbb1fe9a17c3bd2788a7de8f7004_JaffaCakes118
Files
-
b1b9dbb1fe9a17c3bd2788a7de8f7004_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE