Static task
static1
Behavioral task
behavioral1
Sample
05fc29ec547ffc8fd800f5bb2f3c5ad9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05fc29ec547ffc8fd800f5bb2f3c5ad9_JaffaCakes118.dll
Resource
win10v2004-20240419-en
General
-
Target
05fc29ec547ffc8fd800f5bb2f3c5ad9_JaffaCakes118
-
Size
19KB
-
MD5
05fc29ec547ffc8fd800f5bb2f3c5ad9
-
SHA1
8037b2db9e903f749719932fdccde9426e23acd5
-
SHA256
ee157d8bfa35e00487bf9d6b4ba244ee48febdc8dd4fdb34e3e5dcb9912ca05c
-
SHA512
35fdd99d2e2bba3090211fddf536a90458d91d40459b2b47f02e4083d2dcbaecdeb5c3186a9ccdc6943ad47f8f9e4a436122a78667d5302e9e4a7c622d962088
-
SSDEEP
384:Nh216q5x5H0QCXS06DxB2gJpU6lyEep12/4Z0DXS:L216qFUQCXm72gJpTle1N0u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05fc29ec547ffc8fd800f5bb2f3c5ad9_JaffaCakes118
Files
-
05fc29ec547ffc8fd800f5bb2f3c5ad9_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ