Static task
static1
Behavioral task
behavioral1
Sample
fce4516c1409133109d6e3cca2deee8b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fce4516c1409133109d6e3cca2deee8b_JaffaCakes118.dll
Resource
win10v2004-20240412-en
General
-
Target
fce4516c1409133109d6e3cca2deee8b_JaffaCakes118
-
Size
79KB
-
MD5
fce4516c1409133109d6e3cca2deee8b
-
SHA1
ab5c8d6f9461b5017d3ddef48228864141ce77fc
-
SHA256
c9db6ace92cdadc52b645e9672f84fd329b34f714655dfcbc6d690c88224ccf3
-
SHA512
3781405c1b0dc3ca743d6470318ae71a881ac8ff4dc0add0d21eab2cd717e71642c4d4e91b87ff9b95726e6d40a95f0de4e825c4c7cf581c9728537ef9706ab7
-
SSDEEP
1536:M67q1KiatQxzmMGgLTbqCetmDC4WGSfBM+adqs4+tpq4679/mlOIp:M6YhatQxXfPbovqms4mz6Qp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fce4516c1409133109d6e3cca2deee8b_JaffaCakes118
Files
-
fce4516c1409133109d6e3cca2deee8b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE