Start
Static task
static1
Behavioral task
behavioral1
Sample
089a00fdddb10de8748f10c92fa98c51_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
089a00fdddb10de8748f10c92fa98c51_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
089a00fdddb10de8748f10c92fa98c51_JaffaCakes118
-
Size
92KB
-
MD5
089a00fdddb10de8748f10c92fa98c51
-
SHA1
79b2d6b54f45399fb00796c6ff5a4129089c2690
-
SHA256
f885871a9c0ac0c628ddb74a5fa7e31e0cda40194c45ffd00cc039f0462fc8dd
-
SHA512
892812e7931a9e7ce17608e7a301c1df7f27dc2da59d94797ed9dc2c7531d8f6c1f15bb19dbcc9527932ae537f1705eef460e30ea625dd4fb8e608eb8273b686
-
SSDEEP
768:oZi3qCu3MkD7Y2kJ5BrKoxmRSP7A+0RQa8CD9YXMEaa4uRg7UVtczQ:oZi3qCmMkD7BkJ5BkS101RxYXMbsgStx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 089a00fdddb10de8748f10c92fa98c51_JaffaCakes118
Files
-
089a00fdddb10de8748f10c92fa98c51_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE