Static task
static1
Behavioral task
behavioral1
Sample
b9b6093d0cb6a70484e499ace463ca99_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b9b6093d0cb6a70484e499ace463ca99_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b9b6093d0cb6a70484e499ace463ca99_JaffaCakes118
-
Size
47KB
-
MD5
b9b6093d0cb6a70484e499ace463ca99
-
SHA1
2d662c0e1c27db91049b9bf4fcb0277aedd80f22
-
SHA256
8190d016bbb958d61e530b07d581f986255ce566301bd407ed3cca4929b13f6f
-
SHA512
47f633461638dfe773dd2fba38faa25444d1dbbb259f3c562d04a68d479a02388b306eb60fc86b4db9ea4a6d2cb5e1f360afb55405b6f42d284136ee3508e22d
-
SSDEEP
768:p+8vezTJSGdHH5i26reVGgH5ocsoGrcyG32y:34Tv5ZinreFocAG2y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9b6093d0cb6a70484e499ace463ca99_JaffaCakes118
Files
-
b9b6093d0cb6a70484e499ace463ca99_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE