Static task
static1
Behavioral task
behavioral1
Sample
261d5fe4cf72c6626c29748e9295f135_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
261d5fe4cf72c6626c29748e9295f135_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
261d5fe4cf72c6626c29748e9295f135_JaffaCakes118
-
Size
35KB
-
MD5
261d5fe4cf72c6626c29748e9295f135
-
SHA1
1c36d3355fc1aa00e470e6e13b704077726c1aed
-
SHA256
b7bea25755b136c0e12c64c732000becf52c0fc7c0164e2b5dd16d9a29d1738b
-
SHA512
16473fa22a52560a8d9af943cb8feab073d98d4661aee6b2e5568fcd08f5ea1de09955c49e2699f8b8c0de1e7f348e6b5e8cbb83e8d4e47a2a1c7fd21b383445
-
SSDEEP
768:JbxPVj1gaNkskyMgaFIJi+3sqahpsgodqpXDZ4GkxUmnpY:J7kls/3aHHSqpXD6GwnpY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 261d5fe4cf72c6626c29748e9295f135_JaffaCakes118
Files
-
261d5fe4cf72c6626c29748e9295f135_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 74KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE