CreateObject
Static task
static1
Behavioral task
behavioral1
Sample
087ba10d5ac088dc96f8ca081eb14260_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
087ba10d5ac088dc96f8ca081eb14260_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
087ba10d5ac088dc96f8ca081eb14260_JaffaCakes118
-
Size
243KB
-
MD5
087ba10d5ac088dc96f8ca081eb14260
-
SHA1
63f71cc544b5b580ba6b2724a01800a5ee4431bf
-
SHA256
eeb2572fba526b78c8229dc8b96869ba421f7dec13794f35e4c5ff57ddc73521
-
SHA512
df03b2281c9660e7fb4388059b24ef920393f230fd47a423668ce12e2f339d8cbf1b9449cce24af6b1afe7cd407aa148ecfdeee8499533ceb92d25c006b670c6
-
SSDEEP
6144:bHi4YGs+++HikT2m5nx1/VGvxUUJnIaNOwHpBOKiiJk27YpK:bHZY/+LikamRx1dGGUJnIaNDlTm2EM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 087ba10d5ac088dc96f8ca081eb14260_JaffaCakes118
Files
-
087ba10d5ac088dc96f8ca081eb14260_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
nsp0 Size: - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 243KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE