Static task
static1
Behavioral task
behavioral1
Sample
b9187f1531c005f573ad9df8f4965e10_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9187f1531c005f573ad9df8f4965e10_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b9187f1531c005f573ad9df8f4965e10_JaffaCakes118
-
Size
49KB
-
MD5
b9187f1531c005f573ad9df8f4965e10
-
SHA1
88a93a10956bee27bfdbadd94b7e4354d3f7c6d2
-
SHA256
c1d750aca6854e461fa30a59103983c289c6947b5ff71d56ecdd4aee1bbf633c
-
SHA512
4971d04ca5b8bf20a970792847c3160265b8547701ef14e140d2a5dbb9c52dbbf292763322d6a2fd710b639f51c4ea6845c00411714f1a0d47acafb2aa60d564
-
SSDEEP
768:r77OF9ODEKh2yuo8KjGH+UoMNrsHcZspWN3nAuG8JGuKYbYJFDyeu:UODQKiCw8WhAb8jKYbYbTu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9187f1531c005f573ad9df8f4965e10_JaffaCakes118
Files
-
b9187f1531c005f573ad9df8f4965e10_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE