Static task
static1
Behavioral task
behavioral1
Sample
0f77c632d8b62d87baf0ff243eb14d80_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f77c632d8b62d87baf0ff243eb14d80_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
0f77c632d8b62d87baf0ff243eb14d80_JaffaCakes118
-
Size
8KB
-
MD5
0f77c632d8b62d87baf0ff243eb14d80
-
SHA1
3428da7bd5ae7b5bd4b23fb11fde06a709a97eaf
-
SHA256
88f26aa9d1866b5eddf98d0cd33a1e78dd2921c68b8850beb38f66eb2e3a8350
-
SHA512
ae44923640ef2ab6cc9d771b11a34bd5b7fadba8d8d8b392cbcac8e57716d88f30e685086d21202587aa42fba929ed25dd65c3e0be7044b5e2cbc2554faa0fb6
-
SSDEEP
192:kH/41sUVd2wlJXXvsUDpEMhrL6TjScu9gStFlgbhAjkgUwzO4hd5dU:k2LIwnTDSMhrWycQbSbhA834hd5dU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f77c632d8b62d87baf0ff243eb14d80_JaffaCakes118
Files
-
0f77c632d8b62d87baf0ff243eb14d80_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE