Static task
static1
Behavioral task
behavioral1
Sample
fde9326cee23e57eb6ac6783c9b0754c_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fde9326cee23e57eb6ac6783c9b0754c_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fde9326cee23e57eb6ac6783c9b0754c_JaffaCakes118
-
Size
83KB
-
MD5
fde9326cee23e57eb6ac6783c9b0754c
-
SHA1
fc1c0d87764aad16f1b48d2c0a96a30cdd5ce12c
-
SHA256
d42a2d8c28067acb5463b9ca82164e723edf457078ddb585f3c72b66e5f7091e
-
SHA512
ca5a8c92624506c129f9a4b22a62a6a6d83c30eae1beec22bc1c739cd96436b895ed36b75bb48469f24d2abe259be12e0636441f7cad8826c41c5235e463e18a
-
SSDEEP
768:wzGaHF/k8buTmER84Xz6t+unfCoVGU8FvBUB87A9Y4RdhBYpNFXSDqy32dTuJ:wj9Dbc0+AKokh9AzRdQsqBY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fde9326cee23e57eb6ac6783c9b0754c_JaffaCakes118
Files
-
fde9326cee23e57eb6ac6783c9b0754c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE