Static task
static1
Behavioral task
behavioral1
Sample
236790736aa1ba31e41b06a33afcb170_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
236790736aa1ba31e41b06a33afcb170_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
236790736aa1ba31e41b06a33afcb170_JaffaCakes118
-
Size
152KB
-
MD5
236790736aa1ba31e41b06a33afcb170
-
SHA1
46a1155cea0d7ae7e0955f01c1d5d4d0c3d2e2c2
-
SHA256
9ad39b8c4bf638c97f6d62b0d30c2fb03b4cc9aaa850e55aee71d580b3ee025f
-
SHA512
05da83afcbda84a05497f8d88ee88887dbc975fdbf30b9dec891a03ade5b614dfb1b4f3722215d2a5d6b2b25fa1f6baaaab4720a279aa8a5bb7b1b6551690cba
-
SSDEEP
1536:uZ7wyPpvEekDo14ncGjMYfyrBw3OGZ+L4Mym+pImhKse4t:0nBvE7DvcGjMYfqBw3OGcVyNrKv4t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 236790736aa1ba31e41b06a33afcb170_JaffaCakes118
Files
-
236790736aa1ba31e41b06a33afcb170_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE