Static task
static1
Behavioral task
behavioral1
Sample
b7076f7d0a0443ec0f4814db0b96fda9_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b7076f7d0a0443ec0f4814db0b96fda9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b7076f7d0a0443ec0f4814db0b96fda9_JaffaCakes118
-
Size
329KB
-
MD5
b7076f7d0a0443ec0f4814db0b96fda9
-
SHA1
3d639e7bd8f1abea3915af0031281e8eb37aa274
-
SHA256
861f2daaaf9a89700ba0cefed9137af66bc022e69d6528ef9a9a7c98cb560491
-
SHA512
da617c7ee4f1e1035a6745a2114e0d5745d9f33282fb1f1d19c0e6ea64d09bebc7b9297b6e662e23c991706f9b45ec080b5a53d2c1e6975a665e72febc12a941
-
SSDEEP
6144:Aik28wHvOQLTZhBDsw0XwWwoqjLyATkBnRURuFsY9:AikrMdLTtDd0Xwj7jWhBR8q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7076f7d0a0443ec0f4814db0b96fda9_JaffaCakes118
Files
-
b7076f7d0a0443ec0f4814db0b96fda9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 444KB - Virtual size: 443KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ