Static task
static1
Behavioral task
behavioral1
Sample
fc1b778b2dbb0a408ce4e95db9eef607_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc1b778b2dbb0a408ce4e95db9eef607_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
fc1b778b2dbb0a408ce4e95db9eef607_JaffaCakes118
-
Size
16KB
-
MD5
fc1b778b2dbb0a408ce4e95db9eef607
-
SHA1
5a47f67f59583b6c853a328f28d0fa1be670e820
-
SHA256
2edd40fbe2ba66a3a5ed6c6081cb577b842dfe5aecd63d69e2e01b6476f1c5f4
-
SHA512
5a411a11c72c9e43af3c75627e327d1d982592da189bd33034ba0db442717b97d43b4534605e3efdaa06079d2e0ba4927e73c781c5d63d69d2541cbd2969478e
-
SSDEEP
192:L9O764HqxzL+ELzvmVG0u0YL+sNvS3x2FrXUZm:6pHW+E2/SN63x29EZm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc1b778b2dbb0a408ce4e95db9eef607_JaffaCakes118
Files
-
fc1b778b2dbb0a408ce4e95db9eef607_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ