Static task
static1
Behavioral task
behavioral1
Sample
fb8665612d9c53707cd5a4108442de83_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb8665612d9c53707cd5a4108442de83_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fb8665612d9c53707cd5a4108442de83_JaffaCakes118
-
Size
18KB
-
MD5
fb8665612d9c53707cd5a4108442de83
-
SHA1
379656bfb0bdbcae9116d4e561b6d0d17414a4e3
-
SHA256
789f17526e766f92c7625724f13df96f5dec99983ff9b99703054e4a5a9369f1
-
SHA512
5a050b224eece84c52594d4e5dafe7224d5353bc32feacbdfd497a9420981dfd80a3c04120a38139d0a1e0be199d168b6d7d125ee5139499ede7f24ed86d5d4d
-
SSDEEP
384:rGifk5JNMvnyLR8jv5w3KMquEUwIz7U5p3oE1Q9R/pzgvxcztpJsU:CEk5JUn2ahw3KMquEURz7Un3o8Q9R/1v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb8665612d9c53707cd5a4108442de83_JaffaCakes118
Files
-
fb8665612d9c53707cd5a4108442de83_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE