Start
Static task
static1
Behavioral task
behavioral1
Sample
f0dea02a249bfeceff3bfedeec22c4a2_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0dea02a249bfeceff3bfedeec22c4a2_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f0dea02a249bfeceff3bfedeec22c4a2_JaffaCakes118
-
Size
12KB
-
MD5
f0dea02a249bfeceff3bfedeec22c4a2
-
SHA1
25e957002054f18e046f1bdafd09a015da9aea06
-
SHA256
356098ccb8ad5d26a35cb720128516847ac77d298e004eac58c86149be833f0d
-
SHA512
d009ef7a30a4e9745541e00e8a8020e9482529875de8baab14db59c6c1d222b1a028255fa5bee61ef0fd82db660f8e32d9580209d34d2f148a94e6ad303c0457
-
SSDEEP
192:ZKSquQEYGtl0n1vzHxcBxKxODoY1ln/6CBlWMpeFG7A9rGzy1HYSFGqBNWk21YWK:uE41vzka2N/6CBUhIRCEkNWk2WWhgl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0dea02a249bfeceff3bfedeec22c4a2_JaffaCakes118
Files
-
f0dea02a249bfeceff3bfedeec22c4a2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE