Start
Static task
static1
Behavioral task
behavioral1
Sample
26a47b04091bbc17e0a82b6b97345a77_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26a47b04091bbc17e0a82b6b97345a77_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
26a47b04091bbc17e0a82b6b97345a77_JaffaCakes118
-
Size
11KB
-
MD5
26a47b04091bbc17e0a82b6b97345a77
-
SHA1
0dea450c08cd728c7ca3375236ecc96e75fcc5f3
-
SHA256
990b44756b12253cf0cbe34570e97a75cd7f5d9a61d87a16263644cac1000eab
-
SHA512
c58a4f75f4f0055d835deb53765fc215566c1b97656f59ce8ec6b154eed6b361c2950adf0342d7fed52744f3b8242c4527921256a8cde522d761cfb89be36887
-
SSDEEP
192:/I7kQEv7pzR8TOnyDoERyo/4yC7/5Rj6qUsMz/33o4sODvrCrXIFg6V7UZDNXeUC:g7kJ7bSOnzEko/4yC7/5RGqs/HoMDrCK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26a47b04091bbc17e0a82b6b97345a77_JaffaCakes118
Files
-
26a47b04091bbc17e0a82b6b97345a77_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE