Static task
static1
Behavioral task
behavioral1
Sample
12362235199a6205e6c6b39e7c3079ad_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12362235199a6205e6c6b39e7c3079ad_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
12362235199a6205e6c6b39e7c3079ad_JaffaCakes118
-
Size
95KB
-
MD5
12362235199a6205e6c6b39e7c3079ad
-
SHA1
28f289fde192395ab50c94f5200d8bff68567000
-
SHA256
ba2057311d8977beb1abbcb234eaa24d508cc8f0e840408814d5c72829b1d31d
-
SHA512
b28715922f0ff224894bf75f870026bd901b5ab108222a98c043bc67f128bad7f2bafec2882accccf136d487a03eaa351cbe258cccb42b8751679b819c51a4fb
-
SSDEEP
1536:BR+8KVbvF0jM5K5YHvAFSz4Tp3/E3hq7IgtK38vu6WOwd0cIObkrpAVlt/8s4CTz:BGbmAHvAFSzG5/E3oIgg8v5WNhCpAVj5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12362235199a6205e6c6b39e7c3079ad_JaffaCakes118
Files
-
12362235199a6205e6c6b39e7c3079ad_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 372KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE