Static task
static1
Behavioral task
behavioral1
Sample
1c73d87f668390c5bde764e5f32d43c2_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1c73d87f668390c5bde764e5f32d43c2_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
1c73d87f668390c5bde764e5f32d43c2_JaffaCakes118
-
Size
30KB
-
MD5
1c73d87f668390c5bde764e5f32d43c2
-
SHA1
0eec455911353b7cdc9ab2147ace1c1500131260
-
SHA256
465dcb0e434de7c1b609d30e2b6bbddffae012568de37029ad8d3c3e043e824b
-
SHA512
99e4f4e65c1bdaed1ad6776356d3e793a86c1c36ebd34b8ff788b81001d2bd6468c7b2471d5184a5a34863b905f0f98d273af9bb3fba9b032ebf2140dc76c6a9
-
SSDEEP
768:zjrlvZOHCVNCyd46bb7RfrfQ5UB+c8BJ:3rSHCVNpdPb7FfQ5k+zB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c73d87f668390c5bde764e5f32d43c2_JaffaCakes118
Files
-
1c73d87f668390c5bde764e5f32d43c2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g9q5n Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE