Start
Static task
static1
Behavioral task
behavioral1
Sample
ba4e0a77e959b299c2d0a138b4c3c65b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba4e0a77e959b299c2d0a138b4c3c65b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ba4e0a77e959b299c2d0a138b4c3c65b_JaffaCakes118
-
Size
12KB
-
MD5
ba4e0a77e959b299c2d0a138b4c3c65b
-
SHA1
64024f017d156681e79ac511b24e64c39b42556c
-
SHA256
fe7f58c5acd275cc66e0bbc5b97de334ba2dea6f3b0c963c55f50dcac3d81eea
-
SHA512
6775640cefbc1b1bbdc6d5b0a70a3ce7c34571944cb555039f37caff637c1174e79ca1f6e754f6669e2b58c5c31dc010214166c06b819ac69a65d6b7e41710d1
-
SSDEEP
192:RvBiMhU8EWNxlZxIvenRXTOMP8bryTdxi3RGjQO+Ipzdgf99QwYu+Y2lJkgUw9W:RlKgdVjOMESTU8jQO+IpzoQa+Y2lG9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba4e0a77e959b299c2d0a138b4c3c65b_JaffaCakes118
Files
-
ba4e0a77e959b299c2d0a138b4c3c65b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE