Static task
static1
Behavioral task
behavioral1
Sample
214ae3b9bf60de8eeea0a4f08868d9ed_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
214ae3b9bf60de8eeea0a4f08868d9ed_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
214ae3b9bf60de8eeea0a4f08868d9ed_JaffaCakes118
-
Size
11KB
-
MD5
214ae3b9bf60de8eeea0a4f08868d9ed
-
SHA1
0f5b846432d7f11d1f3cfec8f32751adbc0e4478
-
SHA256
0c81400fb26463f485b0e554251aa251b523c1b41b51e38cbd79fc0358d84384
-
SHA512
e366384c45422096e230301d5a5fe4c8884f45131e7b74b4637af75498c9193d391d2b31237c38cce93deb9b8f3cf0f32981b59f33a4aa29ea33b4986c89970f
-
SSDEEP
192:q8pUEQmbdCyYa3bEThRVeNgMmDitXsFp5SSFzJz44sNFZZVRPfjZ4ckgUw9:qOUENbv9rEThjggMKVvWnZtmj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 214ae3b9bf60de8eeea0a4f08868d9ed_JaffaCakes118
Files
-
214ae3b9bf60de8eeea0a4f08868d9ed_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE