Static task
static1
Behavioral task
behavioral1
Sample
0cc7397c5ad49b6f42d86491bdd893a5_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0cc7397c5ad49b6f42d86491bdd893a5_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0cc7397c5ad49b6f42d86491bdd893a5_JaffaCakes118
-
Size
9KB
-
MD5
0cc7397c5ad49b6f42d86491bdd893a5
-
SHA1
f21bfff3633b9d2f8a542ccd48175f66c118e371
-
SHA256
8bae94943f024eb168834b7bf1eb588f9e88506131866ec0df947dd306c52dd8
-
SHA512
3084c90bd3b1c484bad0a14ac3715fe0f7e350a41b7970bdabb919a2e714cb317f9bb2d3570951207604bf3f08cc9253da6a7ec65a42626addf1ed4b93039252
-
SSDEEP
192:YNo5kmXmEEnkITKoUBQIEtNvokhF5hDJtKfnv23qJthDN:G1mWEHI2oT7Nh9Dqv6qJtN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cc7397c5ad49b6f42d86491bdd893a5_JaffaCakes118
Files
-
0cc7397c5ad49b6f42d86491bdd893a5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
fdsf Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
csa Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fwa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE