Start
Static task
static1
Behavioral task
behavioral1
Sample
24f6194726522e16f6c86f521a74cf28_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
24f6194726522e16f6c86f521a74cf28_JaffaCakes118.dll
Resource
win10v2004-20240611-en
General
-
Target
24f6194726522e16f6c86f521a74cf28_JaffaCakes118
-
Size
12KB
-
MD5
24f6194726522e16f6c86f521a74cf28
-
SHA1
1f14802a177598ac0e7fc65126933056127a8b6d
-
SHA256
a471dff3bd7a0d1430dacec276a21532368931a8d7ba16aeacb22dc24850848d
-
SHA512
74cd6077093ab11ed7da225ca5ed03cb816d3c267ea8ec98ba297b95685a0a76d2865a8e31dc8017c50425401dd7f86dece7afe08ccc8716d2f13b843f77de7d
-
SSDEEP
384:+YdKGvb0/EhcndurIQTG15U1d4vrFyRCH8FCAenCMT:+GSRdkIKGyWvg4HnT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24f6194726522e16f6c86f521a74cf28_JaffaCakes118
Files
-
24f6194726522e16f6c86f521a74cf28_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE