Static task
static1
Behavioral task
behavioral1
Sample
29d68e91956dd4275225557f8f5cd5ab_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
29d68e91956dd4275225557f8f5cd5ab_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
29d68e91956dd4275225557f8f5cd5ab_JaffaCakes118
-
Size
80KB
-
MD5
29d68e91956dd4275225557f8f5cd5ab
-
SHA1
1a9f3e819e8e3ce6a7ca0283739f281bceb1d8ca
-
SHA256
228c2ca1209f8c4fdbc3b652d086665f25992f94c832ba68003e9aaa606b35f9
-
SHA512
2f4ef25774334e76d3afbeedda321a9d591fb6ed3476092a9304ef8102fed8473bec5a9e037576e45015cda6ea33fabc58608da04731c1ac07658ffaf316ec0f
-
SSDEEP
384:EH2ggBoGcSIoA2x1ErGWQlgXpAqH9845AjRxHcYG9NXMGtkdv8:EHXgBoGRAI1ErXQDqd84ujRxhGTFt9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29d68e91956dd4275225557f8f5cd5ab_JaffaCakes118
Files
-
29d68e91956dd4275225557f8f5cd5ab_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE