Start
Static task
static1
Behavioral task
behavioral1
Sample
304ce7489d9657b6b259a7aa40accd55_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
304ce7489d9657b6b259a7aa40accd55_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
304ce7489d9657b6b259a7aa40accd55_JaffaCakes118
-
Size
12KB
-
MD5
304ce7489d9657b6b259a7aa40accd55
-
SHA1
c71af3a08f0c962d2d4b349d50a8b18d819e0fca
-
SHA256
af44050e5489a3837e6a5151c0a5efd2fc9a1e62ff97ccfca75daa54b8e23893
-
SHA512
0931b34235d2768fcf4a4aefee95612d8ec31d5a5dd4cb741ec37f60256aafd63f6a765d9c1a8dfec00f44a7138a358918fd694d5482a470e92956d2d152b8f9
-
SSDEEP
192:+XJ+WoeCx5R1eIugyZgK7FTgt42BpBfG8g5kXV20NF6zX7/RUlWRLkgUw9y:BneMqTb7dgi+f5g5KV2EF6bjSy09
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 304ce7489d9657b6b259a7aa40accd55_JaffaCakes118
Files
-
304ce7489d9657b6b259a7aa40accd55_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE