Static task
static1
Behavioral task
behavioral1
Sample
07c0609e3f931d5d4438c62b3ab60159_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07c0609e3f931d5d4438c62b3ab60159_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
07c0609e3f931d5d4438c62b3ab60159_JaffaCakes118
-
Size
83KB
-
MD5
07c0609e3f931d5d4438c62b3ab60159
-
SHA1
d406f5edafa5a81b2026377bb3e64ccffc7a418f
-
SHA256
530b325a91cebcaec08eee4979fb2647a3e5f74368e0a21e4a2ee3c7a21deaf0
-
SHA512
ff65201384b28e3b7ef4a3bfc60f41b4a34690280653af1fdfb085c8caf593364fc19172748ebbf71f760b6b6f59c3c88385696db87d90087ad47951dbc75f48
-
SSDEEP
1536:dQRajmZ05NxPpO/D/OkrwHNsvk3YBVN9D+uGhvK+:dQYkMN9c/rONaNNN+pFK+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07c0609e3f931d5d4438c62b3ab60159_JaffaCakes118
Files
-
07c0609e3f931d5d4438c62b3ab60159_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE