Static task
static1
Behavioral task
behavioral1
Sample
c8f5e25023933be572f6b2493ef7089f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8f5e25023933be572f6b2493ef7089f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
c8f5e25023933be572f6b2493ef7089f_JaffaCakes118
-
Size
123KB
-
MD5
c8f5e25023933be572f6b2493ef7089f
-
SHA1
89a0391c84bb11c8630f27806d7313133566b08c
-
SHA256
e5c97d638c74ae2c78033681e3901724d1495e133e99a74920c85b8a75e21c81
-
SHA512
baa8d593e733b355fc992cada7222be49fce0c05b32de0bcecef8d22c92640f255aeb98e3c7d0cf7b43ce74845b2c6f2a15c393154d4e0752b265d1956554af9
-
SSDEEP
3072:8CCyejwgo0qDzt0dy3hhGncRnf/2M5zt:5kwgYzW0HGcRf/20z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8f5e25023933be572f6b2493ef7089f_JaffaCakes118
Files
-
c8f5e25023933be572f6b2493ef7089f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 1023B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE