start
Static task
static1
Behavioral task
behavioral1
Sample
f839d8f8b2bff5456faaba13c4db28d5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f839d8f8b2bff5456faaba13c4db28d5_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f839d8f8b2bff5456faaba13c4db28d5_JaffaCakes118
-
Size
1.1MB
-
MD5
f839d8f8b2bff5456faaba13c4db28d5
-
SHA1
ed0f468dcc1e92f0c7dc67c51b8bffbace4af38f
-
SHA256
928c3a1880140501c45571369dfec4b7cb8b703fb3fcfb3bcfb3ac01215d5212
-
SHA512
601771ea32352b89af7e6e90c38c9137a7ef2cbe7872306df1573b3b8778f464d1486d919c4563501d768d8e98bc85b663df7ba268753291faddf897ecea7198
-
SSDEEP
24576:/rtlsUHvTDbZYJYRzGiFs3Jgs1uUij1fK6Ai2UVZT:/rtvtYQ8dipZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f839d8f8b2bff5456faaba13c4db28d5_JaffaCakes118
Files
-
f839d8f8b2bff5456faaba13c4db28d5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
Size: 24KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxx Size: 1.0MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE