Static task
static1
Behavioral task
behavioral1
Sample
fb69a20a31434f552f727a4ef565147d_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb69a20a31434f552f727a4ef565147d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fb69a20a31434f552f727a4ef565147d_JaffaCakes118
-
Size
282KB
-
MD5
fb69a20a31434f552f727a4ef565147d
-
SHA1
39bbf2db2e0ae901d01c6fc5bbd65ccc8502f29a
-
SHA256
7ed7aab37a504239f3e54a5ccba325375644f5400880b1394931202251192d42
-
SHA512
c9f4f009eed7d71a329c17c5721ed4edf856505086634c2363ed25f657bfd8f261119dad33e5d16004a4d9717d863a1b494f7b0c01c032b0ba83d691455cf325
-
SSDEEP
6144:hZzl2w46qRkdesGqPvKWLOvO69wRdnCsBGLW9A0jeW6GePrGCdxzaCtg9miC+:hBn42YvqPCGrCswLWyXtP9aUkm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb69a20a31434f552f727a4ef565147d_JaffaCakes118
Files
-
fb69a20a31434f552f727a4ef565147d_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 716KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 278KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE