Static task
static1
Behavioral task
behavioral1
Sample
54f7d8998693fd6e21774c4592902452_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
54f7d8998693fd6e21774c4592902452_JaffaCakes118.dll
Resource
win10v2004-20241007-en
General
-
Target
54f7d8998693fd6e21774c4592902452_JaffaCakes118
-
Size
73KB
-
MD5
54f7d8998693fd6e21774c4592902452
-
SHA1
6893b353bbb34b37752e671bed2553cf9e48bf7d
-
SHA256
e3299e041061995fe2b55e5327c9aaf480ee958e4c36907dd9838d44653107e6
-
SHA512
523ef121b3db6772f90970c5fd8275adc14939699e6a1fc8a0028daa5a3cc201a9c32fe0680adfcb3fdd3e04b665b3dae613fc87ee1c493a4d028c6c2e9ed983
-
SSDEEP
768:J7TtWJooQbzg4iB2nWMzRKijSdKm3GZBPFaWCSpkyFliknyhntBrHucUvDQ0kRn8:JQ0veB2ndNKiOf38qWCSG+4kTcFzan
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54f7d8998693fd6e21774c4592902452_JaffaCakes118
Files
-
54f7d8998693fd6e21774c4592902452_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
CODE Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 46KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE