Static task
static1
Behavioral task
behavioral1
Sample
06994b88fc56145e67934a82e6f1ca28_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06994b88fc56145e67934a82e6f1ca28_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
06994b88fc56145e67934a82e6f1ca28_JaffaCakes118
-
Size
71KB
-
MD5
06994b88fc56145e67934a82e6f1ca28
-
SHA1
521db83b10bd14bca685683280e849cef6986e30
-
SHA256
a7300ae7cfe8f93f25e9086f895c3978473d59bb8811581316908c9eac3e43a8
-
SHA512
5519a24d9328fbc17d59e5affc2e96ce1a1ffa5810b5b7ccbce49e3b6d66caa57d8748089e0cf04aaf9ed451cdb8336e607d6958df861522c78440a75398f4a2
-
SSDEEP
1536:a94b++y9MY+b/E60sNRjNqpeoRv1QirQd82Ukgtj8O+QHC:1bxyeb/E6vNTFSJS8BVJHC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06994b88fc56145e67934a82e6f1ca28_JaffaCakes118
Files
-
06994b88fc56145e67934a82e6f1ca28_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 398B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
attach Size: 47KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE