Static task
static1
Behavioral task
behavioral1
Sample
f5c2b7a705b5863974e8bb4879709e8c_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5c2b7a705b5863974e8bb4879709e8c_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f5c2b7a705b5863974e8bb4879709e8c_JaffaCakes118
-
Size
97KB
-
MD5
f5c2b7a705b5863974e8bb4879709e8c
-
SHA1
933c6352d3ac1cc5f7e65f68b03e59bec5e4cca1
-
SHA256
687486724e913c74dba8e8ff78f262da59ff7adc095718a61684f4eef9e4aec5
-
SHA512
aeee69bbd1de99334048631d6652e2655c6bcf426f4cfdba03cc462fd0a41b38e8e64c084bef40ef19f3650248ba34fd8bc97823891688afa2b6683bed4ac362
-
SSDEEP
3072:KfKQNqDLpqZxFZ43t0Laj+zPShN4Ih8dhv2b:KLUpaxFZ4dQE+zohwe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5c2b7a705b5863974e8bb4879709e8c_JaffaCakes118
Files
-
f5c2b7a705b5863974e8bb4879709e8c_JaffaCakes118.dll windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Share Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cycre Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cycsrb Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Silvana Size: 330B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE