Static task
static1
Behavioral task
behavioral1
Sample
2395e3436231d16e81c0cc2c11542d0f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2395e3436231d16e81c0cc2c11542d0f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
2395e3436231d16e81c0cc2c11542d0f_JaffaCakes118
-
Size
12KB
-
MD5
2395e3436231d16e81c0cc2c11542d0f
-
SHA1
aa5be79302577ecd687a01918102c86f70b3fbc4
-
SHA256
07d96c5cf03676471cd5ddbfecb3f71a78a62caa92a658c31a7b972b3781a33f
-
SHA512
59d2a21156fee9fafbdb85bca2f87f55f702fd70bc0f2e3b19fe214e09dd05618f005a7ef22ad92144887bade6628c734ba0c689d418330bc3d86ab6d6e3fbd7
-
SSDEEP
192:N0Bxd3SSaQMJaxbWPNlKk5cOv735O8Rj1kbZhmWL6F+ToctDSu3JUBYsnzh46rkZ:NyNMJabWP2IcOKX+FWoctpWBbnt46UN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2395e3436231d16e81c0cc2c11542d0f_JaffaCakes118
Files
-
2395e3436231d16e81c0cc2c11542d0f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE