Static task
static1
Behavioral task
behavioral1
Sample
f96d184a4392901772a20ddaeb6df472_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f96d184a4392901772a20ddaeb6df472_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
f96d184a4392901772a20ddaeb6df472_JaffaCakes118
-
Size
28KB
-
MD5
f96d184a4392901772a20ddaeb6df472
-
SHA1
659b1b998b1869fabd02ace2b85ee7344e2106df
-
SHA256
8fafd71039f0d1dc19e7de57ed2778598c446f8b1fe7f2b1116e9917fe9a8e8d
-
SHA512
7cd0a0a5c64e7d4a7d2360ad8154003f6a53b536484932d445d816413c2c3074267e327e1e26668fd7466cebcb50ed3746d301e836986f9f66a4a0cc5b1858bb
-
SSDEEP
768:agdqvIPDP9zfEX5oYB8Qbv0BpnWAOtJIPHzidP:agdqQPz9WoIxbvSRWpqTidP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f96d184a4392901772a20ddaeb6df472_JaffaCakes118
Files
-
f96d184a4392901772a20ddaeb6df472_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
cv Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2sulc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bilor Size: 237B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE