Static task
static1
Behavioral task
behavioral1
Sample
b489a49100c5da67ff7e6a6d5f1e533f_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b489a49100c5da67ff7e6a6d5f1e533f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b489a49100c5da67ff7e6a6d5f1e533f_JaffaCakes118
-
Size
215KB
-
MD5
b489a49100c5da67ff7e6a6d5f1e533f
-
SHA1
04f3f85e15a63251c6dbaadb32e724703b451e0a
-
SHA256
fb136f4eb2a45d0e9756b678e9489fe00ca9e8d32b42a1b3461aa627978dda71
-
SHA512
076e98a1c1e69b7fe8c06988c006e01e80afeb18bb91d67e483f373c2cea306c9b8f7100c9263a057f96753275e4bb28dad641d3ea39e97f1f6a4ee08fb37a7f
-
SSDEEP
3072:aKAAGgeW5db3HOMFOjbqT9axWWLoINBXc7spsw/4wRZwzVD:SgeWr7nMqTODXEqZmVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b489a49100c5da67ff7e6a6d5f1e533f_JaffaCakes118
Files
-
b489a49100c5da67ff7e6a6d5f1e533f_JaffaCakes118.dll windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ