Static task
static1
Behavioral task
behavioral1
Sample
011fe61410bc0852dcb48bd8bfd83a32_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
011fe61410bc0852dcb48bd8bfd83a32_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
011fe61410bc0852dcb48bd8bfd83a32_JaffaCakes118
-
Size
9KB
-
MD5
011fe61410bc0852dcb48bd8bfd83a32
-
SHA1
345d9150c9719054f60b75b987421ff290dd0acf
-
SHA256
1a771a416bd51d53d8180828d9b575da100256dac9d4406ae431935ec933d213
-
SHA512
bd07820dff505749f652f5aa5f5225cba88b5ebb94c8048b0d99b3db2c9e17be39af56d549c732649e8dd50ac0a6905fdc5658653ca5c6ab7a62110cc2456432
-
SSDEEP
192:iL/EPlqlO7DBp7hMzERvWH4qsJ4qaGk+PxxxXNvtM61UMYckgUw9J:iIPl7tplMzgv68J4cnPZ9vtMzjS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 011fe61410bc0852dcb48bd8bfd83a32_JaffaCakes118
Files
-
011fe61410bc0852dcb48bd8bfd83a32_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE