Static task
static1
Behavioral task
behavioral1
Sample
b330e089bb8abdda36ddc8cf43e811f6_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b330e089bb8abdda36ddc8cf43e811f6_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b330e089bb8abdda36ddc8cf43e811f6_JaffaCakes118
-
Size
295KB
-
MD5
b330e089bb8abdda36ddc8cf43e811f6
-
SHA1
96837172a6b7844b98dfd12c6dd9c3e48bbdc779
-
SHA256
6097c80082fdd6ce8f71b0d04477b93c0c5aab96e6cf072a7c8fd16ecb684b5a
-
SHA512
7b41a7bb046fd104dbc41df63491e361836638746efe50ea51bf05934dd3e2c9168e72a2fa4d5ce7d53df9b1146ffe96321a412345bb649d8fec255a4543b137
-
SSDEEP
6144:eEI80nFXN2APZUwDNV1dxXgVzTopm6PKjhTTe64oKA0pKb/Qm0Tl1aT:5YFX3PZUONV1dxX8Upm68v9/KAJbJ0ZC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b330e089bb8abdda36ddc8cf43e811f6_JaffaCakes118
Files
-
b330e089bb8abdda36ddc8cf43e811f6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 282KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE