Static task
static1
Behavioral task
behavioral1
Sample
d6d5b347c2b192ea8f1590d4bcb06497_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d6d5b347c2b192ea8f1590d4bcb06497_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d6d5b347c2b192ea8f1590d4bcb06497_JaffaCakes118
-
Size
95KB
-
MD5
d6d5b347c2b192ea8f1590d4bcb06497
-
SHA1
2b63769b1c72a613ec862a66cea746b801d472ef
-
SHA256
91306033a37c89a9a2997ed1f882734778a6534a1e70aace24e656221ef378c1
-
SHA512
eb3a298fe6c617108c82dbc525cde45a3acd3c740d154f6c07d4ce9c6f895ffe18670a4391763080cd7bb8ab31b762526445c398c5d863cbf8eda93a1711b06e
-
SSDEEP
1536:epDF/FbUc7SvexVqCGoKlC2igBQItEABnqF05ZquJLnQdpmCdfU+C/lnvc:a3bTSvedGoKlCDgBwGqG5Z/UpDZpC/hE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6d5b347c2b192ea8f1590d4bcb06497_JaffaCakes118
Files
-
d6d5b347c2b192ea8f1590d4bcb06497_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 192KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
agehkbrg Size: 568KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tilcuswq Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tilcuswq Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE