Static task
static1
Behavioral task
behavioral1
Sample
1500c863b2acda568e781c9bc240a0c4_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1500c863b2acda568e781c9bc240a0c4_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
1500c863b2acda568e781c9bc240a0c4_JaffaCakes118
-
Size
5KB
-
MD5
1500c863b2acda568e781c9bc240a0c4
-
SHA1
691814b400ee61256bc7c7b7acc485ad2169d27f
-
SHA256
7134be8d4c72b29599235dc7cec1f21960448cac7e1b4bd69010924fc1be91d2
-
SHA512
c96e6f440da511cbf67d81d0fa562188a100ee35eed5048424103369173c3d271cd0fca2398391998aaae6ae8f2b7f165521039533efe1330e2c3961b0a70a00
-
SSDEEP
96:K5mPm0ycnpEdQj1TvX27uus5Ubkw7W5QlUEccvwiw/Lo9T9QkgcwQwTQ:Hm0ycWdQ9Ouus5Ubkw7NPFmLox9QkgUL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1500c863b2acda568e781c9bc240a0c4_JaffaCakes118
Files
-
1500c863b2acda568e781c9bc240a0c4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE