Static task
static1
Behavioral task
behavioral1
Sample
ffc299d4ab6f224a6759ab35b25e948f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffc299d4ab6f224a6759ab35b25e948f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ffc299d4ab6f224a6759ab35b25e948f_JaffaCakes118
-
Size
2KB
-
MD5
ffc299d4ab6f224a6759ab35b25e948f
-
SHA1
4fb104adf3e7ae9e8a9fe58a84fe65c6a96c01c1
-
SHA256
c0f3726bfc8617ad621202abfafa31a9a3c5c44348079120c416d48f5a0e7b6a
-
SHA512
ee8c73e9272bef5dd7ca12ed3f3f23a3bfbfbbccd58c8809a3b6fe8346f463897fdb62b0ef715c62a0d7bf961180b6ff3eb97afd861b917dd90e054f8efe7d98
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffc299d4ab6f224a6759ab35b25e948f_JaffaCakes118
Files
-
ffc299d4ab6f224a6759ab35b25e948f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_BOX_ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE