Static task
static1
Behavioral task
behavioral1
Sample
00d412d652ad42898b0a7dc0562c405b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00d412d652ad42898b0a7dc0562c405b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
00d412d652ad42898b0a7dc0562c405b_JaffaCakes118
-
Size
13KB
-
MD5
00d412d652ad42898b0a7dc0562c405b
-
SHA1
dab3d0420cdc10ad784ca96af31b0d164e3c47b6
-
SHA256
4ad8a596d2b717a2f9b4183037be6a76b214b73a8a64d76e9094d75c6b6ccc4e
-
SHA512
b3000ec749aca0709a663fccfd5760260d0e1db7e0cf5c8e77aed3fe4af787c50b65af4f608adc2646a384437ef0d6b86545dd8c5c34069ef2766436a43d015b
-
SSDEEP
384:TwW4FpcKu9LfpBvSrIExu75kkLYX2LTza6:TwrFpcvLrvSrnxaJLYX2b1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00d412d652ad42898b0a7dc0562c405b_JaffaCakes118
Files
-
00d412d652ad42898b0a7dc0562c405b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE