Static task
static1
Behavioral task
behavioral1
Sample
0868724f3b9dd7e77daeba40e06e7c8b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0868724f3b9dd7e77daeba40e06e7c8b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0868724f3b9dd7e77daeba40e06e7c8b_JaffaCakes118
-
Size
3KB
-
MD5
0868724f3b9dd7e77daeba40e06e7c8b
-
SHA1
bf8a5f96b4079d8d8da051d416de1031e7ed5f7c
-
SHA256
6d94f1cb9c1a88b635d1d661ed215b2c00a0719a8b2b26d404e7525bfab1df48
-
SHA512
1a20f4b521b17cf36218487174f5c9515d707c274f647da773921f15d8063a0f6f290cf988463bb13f82b384937a39c73e67fc6f0816702ebb5e66468d443418
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0868724f3b9dd7e77daeba40e06e7c8b_JaffaCakes118
Files
-
0868724f3b9dd7e77daeba40e06e7c8b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE