Static task
static1
Behavioral task
behavioral1
Sample
06f2e5a34148850062a3a22832c0e5ee_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
06f2e5a34148850062a3a22832c0e5ee_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
06f2e5a34148850062a3a22832c0e5ee_JaffaCakes118
-
Size
52KB
-
MD5
06f2e5a34148850062a3a22832c0e5ee
-
SHA1
a94afdabad0cc5d889877c825e19eb9e0ba4ae7c
-
SHA256
ca2497aabdd54da50d5035daefa8ec0d3e7311c6841ddb760ab523f3da20b1a7
-
SHA512
3b72d7a790bd6fddd0a79f23a5e4fccb76937b516c2081c633ef061e03310210fe51d4a8796d0a679a513dda4a8b28b550a16ed3c12c0768ffa4fb86517454ee
-
SSDEEP
768:eq6XplQ8nSD1VUGflZlc0AU0+MueJnjsF:d6XPrSJqGfl/AU0+MueJjsF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06f2e5a34148850062a3a22832c0e5ee_JaffaCakes118
Files
-
06f2e5a34148850062a3a22832c0e5ee_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ