Static task
static1
Behavioral task
behavioral1
Sample
0531d74f33137555d4d9e3f5e67a612f_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0531d74f33137555d4d9e3f5e67a612f_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0531d74f33137555d4d9e3f5e67a612f_JaffaCakes118
-
Size
520KB
-
MD5
0531d74f33137555d4d9e3f5e67a612f
-
SHA1
3daabf808514d6641c7f24da84b43673f82c0b38
-
SHA256
0c506f34f338163ba97c2127a52344a779d3cd6048c6cd8b2c28720e38cb9011
-
SHA512
b4fd064519c942dac2cc0e620e424be15f23fbb234668cfa5da5f52c599e562bc64ab5845f066d913286434454d2113d5a2305ca5a4c4d4aa8b90a527845d3aa
-
SSDEEP
768:kQCi5/KjAH6F53qtIOvkgYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYm:kc4ebkr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0531d74f33137555d4d9e3f5e67a612f_JaffaCakes118
Files
-
0531d74f33137555d4d9e3f5e67a612f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 18KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ