Static task
static1
Behavioral task
behavioral1
Sample
f0b279a9ae787d8532b1a16d33038cf1_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0b279a9ae787d8532b1a16d33038cf1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f0b279a9ae787d8532b1a16d33038cf1_JaffaCakes118
-
Size
26KB
-
MD5
f0b279a9ae787d8532b1a16d33038cf1
-
SHA1
0f3b2101944398fd2d415ff273fc1aad60ed5343
-
SHA256
d90ccbeea1f9c569ae3addc01e2a320466473e9218f9b387dd268dceda62acac
-
SHA512
35f6de5d4cd2783d38acd970b2ac4979668edc010770d9af2484a576eb0019e6fc946f4cb9851716fd73b7bf12aa5d9e953d0635491846b90d9e5542fe56ea78
-
SSDEEP
384:R7r73Zg2crWtoMUO3VtHFhyJfpisaq91mo3/LiFctYCJdUk28YOpkmfh1l7J6Emq:R7PS2Z/iBio1myi6t3Dxxd6yoq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0b279a9ae787d8532b1a16d33038cf1_JaffaCakes118
Files
-
f0b279a9ae787d8532b1a16d33038cf1_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 812KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ