Static task
static1
Behavioral task
behavioral1
Sample
02881f38f8da54d468aea307b06b5566_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
02881f38f8da54d468aea307b06b5566_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
02881f38f8da54d468aea307b06b5566_JaffaCakes118
-
Size
312KB
-
MD5
02881f38f8da54d468aea307b06b5566
-
SHA1
b5adad63f281ff1ae61e83529ae23e403113cac2
-
SHA256
db2a535a78f4ffab8d8818122ea5bf25ca32b39c66a973bab4fa6fdd64390544
-
SHA512
81d79470a9cd9ea7fb4ee61fb017fb10d7f24af8330e50ae4b668ac3524fed79be1ba63ad92c90853bc13f7bc068827cfa89b9df7aa07fb62e26e8fef3d31938
-
SSDEEP
6144:N3yS+ymVImrPgFRPMA38TSIcWitH6f2wKPeacnPvDsVyJ+5J7BV1xT9HBA35Du:NCSOVIePZy8XutH6fDKPeH3YyETBV/8c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02881f38f8da54d468aea307b06b5566_JaffaCakes118
Files
-
02881f38f8da54d468aea307b06b5566_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.data Size: - Virtual size: 624KB
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ