Static task
static1
Behavioral task
behavioral1
Sample
f6165bdd49dbeb053bf615333563c239_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f6165bdd49dbeb053bf615333563c239_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f6165bdd49dbeb053bf615333563c239_JaffaCakes118
-
Size
31KB
-
MD5
f6165bdd49dbeb053bf615333563c239
-
SHA1
4b8bb4f603aa64673a5a1cf4d4a703aadfc04610
-
SHA256
728763612246e91e99a97303a6e96fe3628080e8709dc9c25a95df336c0265dc
-
SHA512
da237b071992fe09ffb9f6d21b911d961a80a32f3e30f48dee1adf1e20f1709c1c2aee95c5a5b55c0eafad63b08a3eb9f255cd9fe3bb601586d1ba84fd5eebb8
-
SSDEEP
768:Q4vRd5oGfyudlKf73yT35egcpzqq/GIQILwsjtXSvgcneBJe7sSX:QklC73yl8zqqeIQILDXwLeBys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6165bdd49dbeb053bf615333563c239_JaffaCakes118
Files
-
f6165bdd49dbeb053bf615333563c239_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
txcs Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mxf4j5 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9naylngl Size: 420B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE