Static task
static1
Behavioral task
behavioral1
Sample
069bad6ef9e5716cfd26af7f7245d95b_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
069bad6ef9e5716cfd26af7f7245d95b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
069bad6ef9e5716cfd26af7f7245d95b_JaffaCakes118
-
Size
33KB
-
MD5
069bad6ef9e5716cfd26af7f7245d95b
-
SHA1
04cff35eafdee4f4f66d5714eb30699279f14e7d
-
SHA256
d5c122a925473cd76cbc8862676354610d80da7a9e14bc65d2784f44717b97c2
-
SHA512
9f251aa4ff5c36e08f9cbef4e19a76ea8627c5b04e05ce0433802bd68943cdbc88d751077ce19c3c1aea7230be59a259ce27b8d1487fe67debbbcde421a81119
-
SSDEEP
768:re4TH/zy0W5defiInLF5a/nAC+JLyrUUk/H:64fzyD5aiIZ5a/ACCCF8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 069bad6ef9e5716cfd26af7f7245d95b_JaffaCakes118
Files
-
069bad6ef9e5716cfd26af7f7245d95b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE