Static task
static1
Behavioral task
behavioral1
Sample
b4a930877dfc27f36caf9010222f5b9f_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b4a930877dfc27f36caf9010222f5b9f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b4a930877dfc27f36caf9010222f5b9f_JaffaCakes118
-
Size
13KB
-
MD5
b4a930877dfc27f36caf9010222f5b9f
-
SHA1
3e8389137be84d622837642b0de180b2afc86c35
-
SHA256
58bb3f06365f7840b62cd511d0b90858c2da3a5edf8dca36156aca2b47ee502d
-
SHA512
6d96822d9eda13e06f2971c794594fa7e06e7ddef68d06efbea08f46a17eeeffea238c6bfa1a28d99a3fb1ba1b33dfde47ac37c28f3ad0150db77743acce0f08
-
SSDEEP
192:r6POEDrwMZMYYSUEdtNQEr+nA9H283yej8pKjzYQPMip1vVlJ13D6GD2ni9kgUwt:emEDrfZM2FZhIej8YjT7phLDjObc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4a930877dfc27f36caf9010222f5b9f_JaffaCakes118
Files
-
b4a930877dfc27f36caf9010222f5b9f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE