Static task
static1
Behavioral task
behavioral1
Sample
bbac5118808e5c931039fc5c586d5619_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bbac5118808e5c931039fc5c586d5619_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bbac5118808e5c931039fc5c586d5619_JaffaCakes118
-
Size
240KB
-
MD5
bbac5118808e5c931039fc5c586d5619
-
SHA1
0c989fdb5d84123e93670d2973deb6a4507eb2d5
-
SHA256
1fd92581510d6461e55675d5abb582c5e25eea1bc33d2f83f3c36a0ebc17fc93
-
SHA512
c303294bf2562745cf7ad11c33247a06e4bb211a50248e94799352b8252bc6573a06dcad6e463a83d9e85023ef5acdc28d3fdf637f1a86f4c4e8d858e1d04c07
-
SSDEEP
3072:Pkzd8FQPXenr7JEa0+j7sP9dKmriwf+2XqxziYETyj+fLkf:/MZmETO+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbac5118808e5c931039fc5c586d5619_JaffaCakes118
Files
-
bbac5118808e5c931039fc5c586d5619_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 228KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ