Static task
static1
Behavioral task
behavioral1
Sample
b2573a5211ac801391ac09a1c600c06d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b2573a5211ac801391ac09a1c600c06d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b2573a5211ac801391ac09a1c600c06d_JaffaCakes118
-
Size
59KB
-
MD5
b2573a5211ac801391ac09a1c600c06d
-
SHA1
933ec69831335d6bda06402a093b3a2e333f4604
-
SHA256
17a0197c49073aa0c74a2e8461923ee170f15f4e43a19775b90fc459adc4a887
-
SHA512
cfc9737af1ddce5c9eee7ee527880cd569b54f991e28c000976d9ee6bdd339b68b3a75c6222b6b95aa1877f1a5d8ec8cb2fa19ca6a05d8a4340d658c808ccaa7
-
SSDEEP
1536:dpmAGCyND2vTzZSW4M3DS6k9fz0EE+O5mD0RfP:dpbGT8vRTlkVzOQD0NP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2573a5211ac801391ac09a1c600c06d_JaffaCakes118
Files
-
b2573a5211ac801391ac09a1c600c06d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 200KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ