Static task
static1
Behavioral task
behavioral1
Sample
ba9352fa70a6bc7b6d44bbaac3a95aa3_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ba9352fa70a6bc7b6d44bbaac3a95aa3_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ba9352fa70a6bc7b6d44bbaac3a95aa3_JaffaCakes118
-
Size
33KB
-
MD5
ba9352fa70a6bc7b6d44bbaac3a95aa3
-
SHA1
864ed92ffe615ac8790d219daf89abcadb7e125e
-
SHA256
1714b9121eeb34541d0367a0bf616e42ea2815637f7de78cc6d3a522fbbcadc9
-
SHA512
934b92fc3c5b03239586e239b6e33d782db328bcfa950b49aea8b87008252bf3df8a2d981f05e17cb9d28e496a1fd76fdf7b6de50ca94911b9433e73adeb72bd
-
SSDEEP
384:rbm2H7KLvJHFdd9ucDSkz/9SrOhMpPHZFVuq5XQWX401Cl4NrDMnuICyRdeko:fhbkJ/d9usSW/9OSKPpPXQSU2DMnp3dk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba9352fa70a6bc7b6d44bbaac3a95aa3_JaffaCakes118
Files
-
ba9352fa70a6bc7b6d44bbaac3a95aa3_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 13KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ