Static task
static1
Behavioral task
behavioral1
Sample
b64ddfa04941851077fbc4bf3bd05ea9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b64ddfa04941851077fbc4bf3bd05ea9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b64ddfa04941851077fbc4bf3bd05ea9_JaffaCakes118
-
Size
520KB
-
MD5
b64ddfa04941851077fbc4bf3bd05ea9
-
SHA1
b0ad7662231028a7cd5999dc5eee3465a59c001b
-
SHA256
b068e44961dff4f21ed7dd14934d9c2438d0c741667a2a52835ddca506630bcc
-
SHA512
ab4095b68f5c7942fe6ce005a78ce84412304355257315480de100fc1e61da647e9cc341a2c9a31c6fe9f9b696eb4d5d6f749665a57f2b9c159f8aecbf143591
-
SSDEEP
12288:DmH/NJU16QfMFAi5naIp9dhTH7j5m/X0wwPH896BFh:DmH/NBAynaIpBTH7js/X0zH89CF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b64ddfa04941851077fbc4bf3bd05ea9_JaffaCakes118
Files
-
b64ddfa04941851077fbc4bf3bd05ea9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Sections
Size: 100KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BGLM Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE