Static task
static1
Behavioral task
behavioral1
Sample
219cdfbdc76ffc08d61520a7d5b40501_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
219cdfbdc76ffc08d61520a7d5b40501_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
219cdfbdc76ffc08d61520a7d5b40501_JaffaCakes118
-
Size
76KB
-
MD5
219cdfbdc76ffc08d61520a7d5b40501
-
SHA1
65a0e4440d60070178e8f4e990432835311ad7b4
-
SHA256
049648fac8f638f00690a57500533473a20ed18dadeed726497b01af77b5f879
-
SHA512
4fd8898d4513dbf9287a810156bbac58a731903c94d0a68689b2da92b4352226c976a343287ec84c8a2357b44d94848ca9d0e5d4d87eeb26007a606dcaed6032
-
SSDEEP
384:iAuZbO1kDeoiyVgKrPNWi1p2e+rl825WPSU/ui1Zk2VEGtY:ixZ6iDqy9rPNrX+58jSbEZkR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 219cdfbdc76ffc08d61520a7d5b40501_JaffaCakes118
Files
-
219cdfbdc76ffc08d61520a7d5b40501_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE