Static task
static1
Behavioral task
behavioral1
Sample
b8dbac58756bc878b42bd110b569842e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b8dbac58756bc878b42bd110b569842e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b8dbac58756bc878b42bd110b569842e_JaffaCakes118
-
Size
327KB
-
MD5
b8dbac58756bc878b42bd110b569842e
-
SHA1
bf6a6826c053bb2929af5ca4e461be8af2daafb1
-
SHA256
6dfe75e4ed34dfe0f2fa79290a76f2e24ff135fa4196cf122d87dce7fce912d2
-
SHA512
cda24ea88354c55e0ef9b7ac1ac4264cbb67d48a9ecaacecae1c12ba1a8364ff5fb77ed217c62e343442e6bc9ce1996556a17dca1acc27651b543ed0ef97dee0
-
SSDEEP
6144:rDDqkHyV4W252llvvLk7CrO4CmIBafgkITVb5mqRQLpPTyKPX7qRx4:rDOkSV+E73C+HITVIeUPTRPMx4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8dbac58756bc878b42bd110b569842e_JaffaCakes118
Files
-
b8dbac58756bc878b42bd110b569842e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.NND0 Size: - Virtual size: 816KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NND1 Size: 326KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NND2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE