Static task
static1
Behavioral task
behavioral1
Sample
bc5a31b3952267fc0eaa9298e07ee984_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bc5a31b3952267fc0eaa9298e07ee984_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bc5a31b3952267fc0eaa9298e07ee984_JaffaCakes118
-
Size
315KB
-
MD5
bc5a31b3952267fc0eaa9298e07ee984
-
SHA1
bef86a8238b1bdd4c1e8d642a0657058b6d4320c
-
SHA256
e39ac010ac69a8cae5227d1da087bbe9abedbf78f3016a111a9f914db78bbf74
-
SHA512
8b0db94e2ba3d3d7fe5ca4701145ddf33d4c6d509ffcc88be241621fc674c2160e6805ca4707f868fe77cc6e8d0040792175c895624db244fe84569a653ab4b0
-
SSDEEP
6144:cizsTifwcu7jSyGnVf4PWr1+R4QWMTZWbmfYzm73zCHT5+SbSk:h+LyySV8Ebmf/7D0Sk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc5a31b3952267fc0eaa9298e07ee984_JaffaCakes118
Files
-
bc5a31b3952267fc0eaa9298e07ee984_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE