Static task
static1
Behavioral task
behavioral1
Sample
0fbfa9e44f556b732bd4dc79f65dee50_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0fbfa9e44f556b732bd4dc79f65dee50_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0fbfa9e44f556b732bd4dc79f65dee50_JaffaCakes118
-
Size
9KB
-
MD5
0fbfa9e44f556b732bd4dc79f65dee50
-
SHA1
e9fccc255e957cb580c092039de98b2322df5eae
-
SHA256
2a38d57425ce868c5fa6443fc6f75dd807420d508b9a6dcc9fe4b9ab7a62e272
-
SHA512
9b7c66e9afb9163b1f156a8fa548b86198762ec2ffd885cde891e84f441d9efbfaa2f7ccd01a4d44561e3e12aaa219d51d86e0bd7b4ae560520316dc7083f00d
-
SSDEEP
192:Vh9CSvi3CzwhPqUNZ9Ofd9EKGYaLfNtXDwEIlNfLPBY7GPgVqK++kgUw99:VhNvi3jy8Z9OFOvYCN9fIR2GPgVqZRC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fbfa9e44f556b732bd4dc79f65dee50_JaffaCakes118
Files
-
0fbfa9e44f556b732bd4dc79f65dee50_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE