Static task
static1
Behavioral task
behavioral1
Sample
b6afc58f590a14ee5435ae1d5c781b75_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6afc58f590a14ee5435ae1d5c781b75_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b6afc58f590a14ee5435ae1d5c781b75_JaffaCakes118
-
Size
128KB
-
MD5
b6afc58f590a14ee5435ae1d5c781b75
-
SHA1
4dd8d5e3e1430a23467f2b8caf24b7f9cd6acbc2
-
SHA256
92b7e8fbd494f71768467a33b1f9a631c9093dee796f1f69dbdd35a43b5f38a4
-
SHA512
0bd84255dffc695ef4ac2eb0fdd35393dfa45c90dd8751f1282b8dfaa2a087a995be016f360b61524d2e463cc1d34bf5ea20a8ebd422b573a58b9f9fbe78cf4e
-
SSDEEP
3072:xIsIMNG59FX4tXivh2Hs8HB4ViBVae1Kpb4xBi41wq2aqPw7:vIMNGW5+01h4VfUKpMi4wL6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6afc58f590a14ee5435ae1d5c781b75_JaffaCakes118
Files
-
b6afc58f590a14ee5435ae1d5c781b75_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE