Static task
static1
Behavioral task
behavioral1
Sample
405bb93f3bbe507b00c7924512e65d67_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
405bb93f3bbe507b00c7924512e65d67_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
405bb93f3bbe507b00c7924512e65d67_JaffaCakes118
-
Size
20KB
-
MD5
405bb93f3bbe507b00c7924512e65d67
-
SHA1
0b8620bda03cc65d77cdae69b9ceaea8ee48f22d
-
SHA256
8d7f97c052e46c8ccdf2fe560c254a927e65f99b6b124a9ba0c7b7fa7290f8be
-
SHA512
0257de66609c409f99138a876e8bbea37c76d18fcb30b56bf8f76be24afd2285ce393d2015d36bdff80a9a27d02732220b6756e2ccb5951f2b0c371a390f798b
-
SSDEEP
384:viczPJH9GWVS9LPNlfdUPJVnv2z08VynMvOiBgaWbZbvd:vjPJZV2PvfKPJlv43D3WbZR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 405bb93f3bbe507b00c7924512e65d67_JaffaCakes118
Files
-
405bb93f3bbe507b00c7924512e65d67_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE