Static task
static1
Behavioral task
behavioral1
Sample
bd98c1fd0d2ab3ba731b30a7390d2968_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bd98c1fd0d2ab3ba731b30a7390d2968_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bd98c1fd0d2ab3ba731b30a7390d2968_JaffaCakes118
-
Size
74KB
-
MD5
bd98c1fd0d2ab3ba731b30a7390d2968
-
SHA1
39574d1fe6e4e7fb13dea3225a06787e9f87135a
-
SHA256
29ce225e546786352be4b6927bc9a127170213aad61c51006f84b8043ef0adc3
-
SHA512
077ac3100384f618c96e4c37f9d18ab6a5090810d516bb7683d59ab84518c1617a2685ccb1e6903a90bee1749846ce1044ca1bf2ea72b94854f5d54337a3cdef
-
SSDEEP
1536:+94+sHULfMjVccf8HJ/LnZPKwTnggjGn/Oyc6cEeMd+ClqQnY:1TWEjVuHJ9BMg7PTAJq/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd98c1fd0d2ab3ba731b30a7390d2968_JaffaCakes118
Files
-
bd98c1fd0d2ab3ba731b30a7390d2968_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE