Static task
static1
Behavioral task
behavioral1
Sample
b9e8616e7547865cee7fb588d74741d9_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b9e8616e7547865cee7fb588d74741d9_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
b9e8616e7547865cee7fb588d74741d9_JaffaCakes118
-
Size
1.2MB
-
MD5
b9e8616e7547865cee7fb588d74741d9
-
SHA1
d800b2ef33f8201aaa930f1a50ea7cf90fd8bcb7
-
SHA256
18da7cd1a65c459afe801c60874dfc0f04e6aecf6908b7a1005321f8f6aab8b6
-
SHA512
cc754d70ee40ff0831db3465cb08564a3f6dc0436bb415055759e8546e6435350d5ff54279129c4b3728392be2c862f974ee8f29d1ced374c77799e3d11330cf
-
SSDEEP
12288:x8xRxKvaPJvtisoQfoM31XtyXeSnmhnm+W:raPdtisoQAMFtpz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9e8616e7547865cee7fb588d74741d9_JaffaCakes118
Files
-
b9e8616e7547865cee7fb588d74741d9_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.upx_ Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE