Static task
static1
Behavioral task
behavioral1
Sample
faf2e0511cf1ef82bc8bd121c38ede23_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
faf2e0511cf1ef82bc8bd121c38ede23_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
faf2e0511cf1ef82bc8bd121c38ede23_JaffaCakes118
-
Size
316KB
-
MD5
faf2e0511cf1ef82bc8bd121c38ede23
-
SHA1
ab1b0ff10a0cf0a7ed677942ad03658b8d8250c4
-
SHA256
7eb8e2ee1ec797b0fd765edbccaec6bfef934f52deb2426d1d6cae6c91898b06
-
SHA512
f2990cef152d36afe857882883e41517cee20d4a729b6e991f442c52610a07a9d5b1308e62a649db4e8232723bf3c3815f974a0c1f3cffee8d73ba25a9e11d69
-
SSDEEP
6144:HrMzOA4mI7onX+abS7s2W22YuMYAmi17uutzJuj3xtbpFjBVHhe:HrM4mI4OabNj28MrZNv/EJBdo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faf2e0511cf1ef82bc8bd121c38ede23_JaffaCakes118
Files
-
faf2e0511cf1ef82bc8bd121c38ede23_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
Size: 231KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ