Static task
static1
Behavioral task
behavioral1
Sample
403d13ac7dbee5bf93e6bf42a35fc5e8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
403d13ac7dbee5bf93e6bf42a35fc5e8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
403d13ac7dbee5bf93e6bf42a35fc5e8_JaffaCakes118
-
Size
8KB
-
MD5
403d13ac7dbee5bf93e6bf42a35fc5e8
-
SHA1
bf1ebd222397322d47cca8190913d0558ba62dbb
-
SHA256
65d00eb39ce4795469cba2fd81ba535d6f5feaeca6b7501c43c403deb48d3818
-
SHA512
742a1c839399f7ccc66c5ced07a9c656e36ead9a371dc1225916666fe95634e939eb9929d11a5992b99186c05c513cc1c6a1da7a2cde0d461efcaa78e4ab9d86
-
SSDEEP
192:Q8AqV1mdltIpLT4jW+zzvncXcPTuWClnY1BVkgUw9tS:Q87IIpTkWvXcV8nY1B6r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 403d13ac7dbee5bf93e6bf42a35fc5e8_JaffaCakes118
Files
-
403d13ac7dbee5bf93e6bf42a35fc5e8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE