Static task
static1
Behavioral task
behavioral1
Sample
396ed0e17b03ec78cdd436e9671a1693_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
396ed0e17b03ec78cdd436e9671a1693_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
396ed0e17b03ec78cdd436e9671a1693_JaffaCakes118
-
Size
27KB
-
MD5
396ed0e17b03ec78cdd436e9671a1693
-
SHA1
163d52933084af7676f40025f1d28a6aa1de389a
-
SHA256
e0cf6178651771ca81c79bca88fd4223a73b4a994e6fd23c4c69f105f86c1fc3
-
SHA512
056179946020b048ec6049d2689f300102ecb4bd23644a738aef3d0164b8bb490d50c77b6fe4ab77966cc715cce30f7a8d5b3bde73ee5baafa652762f3ed3be6
-
SSDEEP
384:wdNPPYiGe8wxLfquE7Q4HovJ187WNJQ5tdasAdEa2P82/i2ZPEmbjp5Nwxqup:KYiGe8Kzq1k4s6WNGtaZg3XFEalgxqu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396ed0e17b03ec78cdd436e9671a1693_JaffaCakes118
Files
-
396ed0e17b03ec78cdd436e9671a1693_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
a Size: 868B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE