WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
0fc6846a481e2fe90dbf4f5de763ba7c_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0fc6846a481e2fe90dbf4f5de763ba7c_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0fc6846a481e2fe90dbf4f5de763ba7c_JaffaCakes118
-
Size
4KB
-
MD5
0fc6846a481e2fe90dbf4f5de763ba7c
-
SHA1
0e322e00eeb41f228753dac6df03e80c66ed8ee0
-
SHA256
4d8742111d8196dc2b309e99888ddb4e6281e05bc2e5229cff4554b8afef41c4
-
SHA512
4b52ada7276b10ee9fdc5f8d0c334e797e719b5d3113ba894f0b1ee23fa245511a62729e4529cee01ee5a9a1e3c2bff39ff1f5f72dbd2ea9938c4519e9ffcb52
-
SSDEEP
96:NkUgcBQgxY/Lnd4ByiQ+xuRpaGo2xH27kgcwQwTKX6:NZgc2H/Lw8aGl27kgUwuq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fc6846a481e2fe90dbf4f5de763ba7c_JaffaCakes118
Files
-
0fc6846a481e2fe90dbf4f5de763ba7c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE