Static task
static1
Behavioral task
behavioral1
Sample
26c3020966610dc92f2ff79eddebe1ba_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26c3020966610dc92f2ff79eddebe1ba_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
26c3020966610dc92f2ff79eddebe1ba_JaffaCakes118
-
Size
10KB
-
MD5
26c3020966610dc92f2ff79eddebe1ba
-
SHA1
017598f4049fd4c73407f16a0a6e0658e3bf7871
-
SHA256
b930f9a358366961cf8420d52de25aadb18762c71ea95eef4aab57d8e93ce93e
-
SHA512
032c508a2039b40d2b6b8f0edea5353dbd762dc4a6b68dbe6890cf05cc933108b9ceb00f827886025952d3138a148ae0fde5279433ee148b9a4d99fe42aa909f
-
SSDEEP
192:KNgb9e2MVtcpInW/NL6V4acXTpxr9JU9rPnbcjRFlHQh89+:KaJe2jJlvhX1LOcNFlHR+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26c3020966610dc92f2ff79eddebe1ba_JaffaCakes118
Files
-
26c3020966610dc92f2ff79eddebe1ba_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 107KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 114KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 116KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklav Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE