Static task
static1
Behavioral task
behavioral1
Sample
bea8ee5d42d41fcd0dce468ee87cb73b_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bea8ee5d42d41fcd0dce468ee87cb73b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
bea8ee5d42d41fcd0dce468ee87cb73b_JaffaCakes118
-
Size
27KB
-
MD5
bea8ee5d42d41fcd0dce468ee87cb73b
-
SHA1
b5f2305b8ea094eaf66eebcb7638a9bd788bd633
-
SHA256
9ee8a76e33e33138b90b7cd4da266e2dc5e703311409a3e44af40b07498ca86a
-
SHA512
5556102bc94b06bc950ed6897f819a618c6ed3b537b4aba425ef48d44aabe2f3415dd8a9827e2870d0de8af4db6970be52ce3665caa09d9d8d249f6b34e52737
-
SSDEEP
384:Yjth9v7DzeQJviGzfKAZlBSxggdUeFqKuzSZFJPwXd2IlNsCviDPz74wVFKKYBa3:SVaQd9zfKADBSxggd1qUJqSCqaK4XM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bea8ee5d42d41fcd0dce468ee87cb73b_JaffaCakes118
Files
-
bea8ee5d42d41fcd0dce468ee87cb73b_JaffaCakes118.dll windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 340B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ