Static task
static1
Behavioral task
behavioral1
Sample
bb369990f6b0b46f577463cc76212b99_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bb369990f6b0b46f577463cc76212b99_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bb369990f6b0b46f577463cc76212b99_JaffaCakes118
-
Size
37KB
-
MD5
bb369990f6b0b46f577463cc76212b99
-
SHA1
d0d0a7536bb60bf381c85f807a548a0cceedf9ba
-
SHA256
60f07040c83ab5e3652797a14404bbee002096a89ff55486c6a3a00fe7f94d58
-
SHA512
7ec3220f9f0924dfb71696584ecd0660e1c3111f9bffb973e9ddae0e21f798d5d655c85b704da6456dfe716dabfc92b905bc128833c5f3a52b4c59ec38c0fd53
-
SSDEEP
384:fEZ57GFkKATVmExwn65Uq2Tusd1V/WcUiN34n9IR4ksqxN3PnABCFgZCFdeSl2hp:sXvmE665K315Wdm6jkXFgOdeSyO/A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb369990f6b0b46f577463cc76212b99_JaffaCakes118
Files
-
bb369990f6b0b46f577463cc76212b99_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE