Static task
static1
Behavioral task
behavioral1
Sample
b9d9238088490b324ed7445292c54610_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b9d9238088490b324ed7445292c54610_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b9d9238088490b324ed7445292c54610_JaffaCakes118
-
Size
138KB
-
MD5
b9d9238088490b324ed7445292c54610
-
SHA1
493bd682e529766637b30c6589c7fa843c7ef709
-
SHA256
b185991d0a51b7e2e7c842af4461b2d1cfc3cb49afa70da44d68bffad1d781bc
-
SHA512
7dd2e6d94f843da97f945f1bd7f34ee19f34d67356936da05f3dea3b27226a841fe477201bd9a379ac200d3ecc58d1c6e36c7e42eeceb35cb90ec60cef826950
-
SSDEEP
3072:GAHWkaq8G7LfN9hq+Y82EJhFVRIfLZ4fmqbh/ge9Cf5URUJxUs9:EkaqZNqT8RzRI9kP2vCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9d9238088490b324ed7445292c54610_JaffaCakes118
Files
-
b9d9238088490b324ed7445292c54610_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ