Static task
static1
Behavioral task
behavioral1
Sample
b318318b76a7cc61f3bf26dc0db06f55_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b318318b76a7cc61f3bf26dc0db06f55_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b318318b76a7cc61f3bf26dc0db06f55_JaffaCakes118
-
Size
44KB
-
MD5
b318318b76a7cc61f3bf26dc0db06f55
-
SHA1
5921d5639022bfc8d7f57cbaa89e3edf3c61f37d
-
SHA256
6374d6bd9a0bd1ead25025fecb33d30d53c02f548ffe6afdc03e5ce9f2506d92
-
SHA512
6491ff239bce59f45955e1cd5da8a3016a6b1a3d398af5da1d55886d7aefa794459cd7d8024870399d75dd6bfed03aa40e3c892711ff92ede85aa4f29e9d240d
-
SSDEEP
768:KlhESQFdb+As4lkBBX7y0M41O35Wo0rbFTMItxOP0HxXUgL7ouwMQRXuu7G92Ukh:6h7mrgM0nssXEW7eoEeN5dMga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b318318b76a7cc61f3bf26dc0db06f55_JaffaCakes118
Files
-
b318318b76a7cc61f3bf26dc0db06f55_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ