Static task
static1
Behavioral task
behavioral1
Sample
26c167666f92570ac026b2c42ffa601f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
26c167666f92570ac026b2c42ffa601f_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
26c167666f92570ac026b2c42ffa601f_JaffaCakes118
-
Size
123KB
-
MD5
26c167666f92570ac026b2c42ffa601f
-
SHA1
fbfb6312f1e50790ef3ee3396b44fde5b487fda7
-
SHA256
ff8087ff6b3c15047775af4c110f38399e2ba8673e05303484d3c45e9840f2e8
-
SHA512
1a9e13391751c1ae7266a002a0c549abdd45ba3d47d385d1c355b73ed030ae3bd887851a149f6b85872cb8cca2a01956ea6eddf8d31e5b611723c6e78691ae47
-
SSDEEP
3072:R05AlrvCSTsfqBIoSYgX/1AIcoabhU14oCOTMVeAjGG7v5:nl89YgXM9bhUTHTEJG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26c167666f92570ac026b2c42ffa601f_JaffaCakes118
Files
-
26c167666f92570ac026b2c42ffa601f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 619B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ