Static task
static1
Behavioral task
behavioral1
Sample
bb5ace024f93f840ed9264acbf9d141f_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb5ace024f93f840ed9264acbf9d141f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bb5ace024f93f840ed9264acbf9d141f_JaffaCakes118
-
Size
22KB
-
MD5
bb5ace024f93f840ed9264acbf9d141f
-
SHA1
b51fc88b75f98cbfa05de4f2d99b831588288065
-
SHA256
530abba0952f2c4f20748e8be558de3f734c163319f54a0f9d45d0ca2cd68976
-
SHA512
b901de6edbb44b5356fd2c89631f88feb13e1853ae13f8c2007e7fcd7a7d12c7f61ce2baf1b96c8a9729c5247582e0929652bc5df323c0065ca94a73a66616af
-
SSDEEP
384:pa/tu4/KLKI13sPMV7n5fYKIrzFmpqM811O6fLZ1t2Gg8mN69Aq:pUJ818PgBu2eVv2mmN69A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb5ace024f93f840ed9264acbf9d141f_JaffaCakes118
Files
-
bb5ace024f93f840ed9264acbf9d141f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ