Static task
static1
Behavioral task
behavioral1
Sample
070bb854ac7703ed735043f3632251e5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
070bb854ac7703ed735043f3632251e5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
070bb854ac7703ed735043f3632251e5_JaffaCakes118
-
Size
98KB
-
MD5
070bb854ac7703ed735043f3632251e5
-
SHA1
8673e713662423c498e9b0d4072cf7de338a73eb
-
SHA256
14de008f26e712ffbdb4bd690d75f0bcbab769ae1a62d7ec5be0df5b515e6932
-
SHA512
a4cc2430dc7677b27278ba53f255386cdd5fbbb109be7ff8b8cd7d40611a0dd0fd805a63e4ae50400c2a21de2dc6a36baf08446608f07859d32b4e6ba814a60a
-
SSDEEP
1536:EI7tQ3FAGbfOcn0F256E64UvnZ6rEmb4X:D7wSG6W0FaT3U9X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 070bb854ac7703ed735043f3632251e5_JaffaCakes118
Files
-
070bb854ac7703ed735043f3632251e5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.tttt Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdddd Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dddd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
woria Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rerer Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MABIDE Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bao Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE