Static task
static1
Behavioral task
behavioral1
Sample
082e14c3c01ed10a67e45974ea7e5573_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
082e14c3c01ed10a67e45974ea7e5573_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
082e14c3c01ed10a67e45974ea7e5573_JaffaCakes118
-
Size
12KB
-
MD5
082e14c3c01ed10a67e45974ea7e5573
-
SHA1
ec120290d048ba0a8959eb485e5ebcc2ead16478
-
SHA256
fafaa408702082d1bad8bda51b46d070d277f4151be0db101cb07d29535bbdc2
-
SHA512
b8e09b455a2b1ba35060cb244e48d730cf2057cab508e40ada25762f0cc38376ee6198c4b9d4e260ca4a23567c0c449c4dec0520299a1d12be04c4f1155ee750
-
SSDEEP
192:zl5u0SkOdBh73qxtsPViSqhsJlB5n0Qt7tar6kaUFpvDAyPkgUw9ho:dSkOPJqPs9X1nZtarFHDAyw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 082e14c3c01ed10a67e45974ea7e5573_JaffaCakes118
Files
-
082e14c3c01ed10a67e45974ea7e5573_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE