Static task
static1
Behavioral task
behavioral1
Sample
bafc495086728ca0c268f6b95aab99f0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bafc495086728ca0c268f6b95aab99f0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bafc495086728ca0c268f6b95aab99f0_JaffaCakes118
-
Size
33KB
-
MD5
bafc495086728ca0c268f6b95aab99f0
-
SHA1
678f9428e03e7ecb11b96974fd3744208afb31ec
-
SHA256
2b9c5ddc3b3b71a7ecfa46988f18157a871307102086f76d9145dcc71eb9307a
-
SHA512
b251c94289711b594e2a0db5dce8130e0aa71d441ad4353b9948d4979b9fc6b32f98a9c508c6e404678a1777395819ada22bca1f998acabfc785df7120215197
-
SSDEEP
768:7QOZIHD2hn3jdfrprJ2j4mJojsYLstc058TmpMQ+c:7bIAFJU8mJojsEc59MQ+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bafc495086728ca0c268f6b95aab99f0_JaffaCakes118
Files
-
bafc495086728ca0c268f6b95aab99f0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
9uq Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vuw2f4 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ozsj Size: 728B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE