Static task
static1
Behavioral task
behavioral1
Sample
396f12838971b8722558d89039815c83_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
396f12838971b8722558d89039815c83_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
396f12838971b8722558d89039815c83_JaffaCakes118
-
Size
16KB
-
MD5
396f12838971b8722558d89039815c83
-
SHA1
5fa1d419840615f96fa627c881510b549f976ea7
-
SHA256
5bb06ce62085e3e66970cd80932e7e225c49027f0e905ad83299a1f0732fdf1c
-
SHA512
45f13f795556cc6f83e71ee586dcadee5ab7737ad873f899c633c53ccbfaf7573329668bae4b98d63efeb442279067359b0a56e61b78974726ebc4885404cc0b
-
SSDEEP
384:YzxY+ZLNZmcS4OXYswqNYyTiLV5pHQkvnZ167XFjFIMIO0my1ZxQ:YzxY+ZpK4Psb+BrwAZE7DIpzvxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396f12838971b8722558d89039815c83_JaffaCakes118
Files
-
396f12838971b8722558d89039815c83_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE