Static task
static1
Behavioral task
behavioral1
Sample
02bfa911ecd21cc6a029b87c61bf2ff0_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
02bfa911ecd21cc6a029b87c61bf2ff0_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
02bfa911ecd21cc6a029b87c61bf2ff0_JaffaCakes118
-
Size
108KB
-
MD5
02bfa911ecd21cc6a029b87c61bf2ff0
-
SHA1
d8d47266f5a97d1472225b03b66b10980f1f8c35
-
SHA256
d304fd03a4eab62a9799ee003a4d07c30e5b238a0604159322e370f5e53ed2ce
-
SHA512
b35d75c7cfb7ce99c6110741021c9d4f593340bec1ece5f77e39231ec74895eedde49f5df1ff7304c2dab91883d56598c70e4d592db98636833fa99b32389402
-
SSDEEP
3072:OwDH444BfM8eEdlpRuwo3E5A2RWQ2ZSZ:xDibuwEE5zMQ0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02bfa911ecd21cc6a029b87c61bf2ff0_JaffaCakes118
Files
-
02bfa911ecd21cc6a029b87c61bf2ff0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 894B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ