Static task
static1
Behavioral task
behavioral1
Sample
06f5745878dba3deb82473c9b814204a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
06f5745878dba3deb82473c9b814204a_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
06f5745878dba3deb82473c9b814204a_JaffaCakes118
-
Size
180KB
-
MD5
06f5745878dba3deb82473c9b814204a
-
SHA1
03d4370ed264e5af61bd8c9c9607112f5a50aaee
-
SHA256
338a7234aa92cd1adeb9e354fbc26543528f9c59fef7751586ae92f860a569be
-
SHA512
1817a57388eb4d5003af1645ff3e5bb6a736615b63d4d3b855d24b2f1bd901c3b4dc7019c3d928897edcfe03f75204a0e67e25be25fc39adb8d2fc55f198c092
-
SSDEEP
3072:KU4VHjEUesBVn/l5hxbk79sNLboUldMUlvAlKqSIva3dDE44xhLw9j/luF7ktg9i:KUmIiVhxKkPoUxlkcdE4sS9J0M/eNZM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06f5745878dba3deb82473c9b814204a_JaffaCakes118
Files
-
06f5745878dba3deb82473c9b814204a_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
�ch0 Size: - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�ch1 Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�ch2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE