Static task
static1
Behavioral task
behavioral1
Sample
b9b0c92921d3e794c25b2def7d83916d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9b0c92921d3e794c25b2def7d83916d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b9b0c92921d3e794c25b2def7d83916d_JaffaCakes118
-
Size
83KB
-
MD5
b9b0c92921d3e794c25b2def7d83916d
-
SHA1
6bfc0ddf7141596b00921775b52f963bc3d5ce6b
-
SHA256
44dbe82645c240e688a29512efcb172a2cd57f2bffa93a5a3e4e6239b24386dc
-
SHA512
b0aeeb9b93a80ce4d7e46aade0331811082784d1829a3b6c1880e89bcdd1b755178d353280cf91120076c09aabcb0e7a217a8a4a2273c7c5030a77b55f40e1d7
-
SSDEEP
1536:i727eQQ9lycf5+CEmn6Na1SD5hqmCjw+TFqe2c+Fbpsu0/2:Sxecj6NmSDTxS3Tj2c+/o/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9b0c92921d3e794c25b2def7d83916d_JaffaCakes118
Files
-
b9b0c92921d3e794c25b2def7d83916d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 184KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xumjmyav Size: 572KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehmfrbat Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehmfrbat Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE