Static task
static1
Behavioral task
behavioral1
Sample
b95f83ca4dfa0cea77b9b56a2fb521aa_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b95f83ca4dfa0cea77b9b56a2fb521aa_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b95f83ca4dfa0cea77b9b56a2fb521aa_JaffaCakes118
-
Size
83KB
-
MD5
b95f83ca4dfa0cea77b9b56a2fb521aa
-
SHA1
6f40a21b01fd130c4217d18109ee3bb412b5ae2e
-
SHA256
b64057b169763a02cbfc1ce0f9d32ae16962b55f26455d30a3bb4995133048aa
-
SHA512
8ecd3e2a97b5b45870ccb09ee6df482fc81ec4d80b9a57fd07dcb5726c9e9eeeff448ed2415d05586e5ec7f3ddbc5f641a8eff9ec9809430d2f0e1a993baf84b
-
SSDEEP
1536:jm9HqHn4SXZfharZAm57JpgUN5oCkyBWAj/cV1U57JpgU:+s4qRQVAm5fgcLj/6U5fg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b95f83ca4dfa0cea77b9b56a2fb521aa_JaffaCakes118
Files
-
b95f83ca4dfa0cea77b9b56a2fb521aa_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
f2rn Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u2id5lj Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4ng Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE