WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
035c0d616533e81b2571f1b38ecff303_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
035c0d616533e81b2571f1b38ecff303_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
035c0d616533e81b2571f1b38ecff303_JaffaCakes118
-
Size
4KB
-
MD5
035c0d616533e81b2571f1b38ecff303
-
SHA1
5694aebf60698ed0f52ec03c339359493601e756
-
SHA256
102b9abc88b79b90e0b214b0c13657001fb71fad68c87940bc73ab45c163dc63
-
SHA512
803c154e2cc3cfbd5530fff29d4ce0b36dec2eae55f6764658aca852645389be5f2945a983e1dd9ad62814b0b0fbe0d60ca46336227bb9794882503cc04068c9
-
SSDEEP
96:zUVUmuu5E2ZqnhABltQmCLFLxh+VgElQyrrEKYz7VMj5CUJ1vbkgcwQwTKg:z0dE2Zc29CLNJEEKY/Vk5CUJdbkgUwug
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 035c0d616533e81b2571f1b38ecff303_JaffaCakes118
Files
-
035c0d616533e81b2571f1b38ecff303_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE