Static task
static1
Behavioral task
behavioral1
Sample
001cd8b07a12f7668786046eec14ba5b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
001cd8b07a12f7668786046eec14ba5b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
001cd8b07a12f7668786046eec14ba5b_JaffaCakes118
-
Size
159KB
-
MD5
001cd8b07a12f7668786046eec14ba5b
-
SHA1
c40507324277d7ba2541bd8009d34aea6ab2f0a9
-
SHA256
6d5bb2fb07da40a58997d0b7f79920c78c043d5bb3d89077adcf480276a1be8b
-
SHA512
b5de249ccbc5ee5fc719785c1212c3cfa1c5a7a33549775cfc8afc2ba3b97426ec4c245d9c71396b3c2daf5662b600622535a55c239e85454d35d6f406159867
-
SSDEEP
3072:ZnQecXC4SWyuxqTckdfABhKFewXWjP+33UIulckC7HDhv/E:ZQeLHqadfbAwmy3UIEcp3E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001cd8b07a12f7668786046eec14ba5b_JaffaCakes118
Files
-
001cd8b07a12f7668786046eec14ba5b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 198KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE