Static task
static1
Behavioral task
behavioral1
Sample
bdd63071c7962ed528f80997b91e55b7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bdd63071c7962ed528f80997b91e55b7_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bdd63071c7962ed528f80997b91e55b7_JaffaCakes118
-
Size
4.2MB
-
MD5
bdd63071c7962ed528f80997b91e55b7
-
SHA1
7d85b6e011b0807c1c879fd7832add2f740d5ab7
-
SHA256
3ebbb5a08787ed33601e40dc7abfc5d22e7fd7d0baead3e9b64f5368941e888f
-
SHA512
dd7c6f489f3cb6cacff4b44164e2c59c682c74a946f7cf57246d62eb70fa6a765f9b6967543412ed8cf75571791ba5f026d6cbe95b75ec2b4790dca2b5a2cbf0
-
SSDEEP
98304:stv+9IVcI5ORK+7kX1HzCCFwNgKhq35APacqNV:7XjCFwaKkpAON
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bdd63071c7962ed528f80997b91e55b7_JaffaCakes118
Files
-
bdd63071c7962ed528f80997b91e55b7_JaffaCakes118.dll windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 480B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Tut4you Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vvxowosf Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uzlycmsb Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PE_ADS Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE