Static task
static1
Behavioral task
behavioral1
Sample
435525be9bd54266b45a1aab4dd6d617_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
435525be9bd54266b45a1aab4dd6d617_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
435525be9bd54266b45a1aab4dd6d617_JaffaCakes118
-
Size
72KB
-
MD5
435525be9bd54266b45a1aab4dd6d617
-
SHA1
c8f883c8e54706cea34b6b4210164423fafc4538
-
SHA256
f2a95fef97eab22e0d0f3fb59b8ccf1f358a02a36ff280a973e66dc9a0b8419e
-
SHA512
8fe0fa8f5384c9a419dc9b00b99bce4e8eb2dd9cc58a054e61e81fb7df7d2b42c228f21672151a2682a34133c0fc1ca5b40e2eeb4658ed1a59a7edfe00398ae7
-
SSDEEP
192:1HSDYgwdqJmc4HEHz00Lzp1Jp1D3FLD9Il1LFEb1b3FiZaV/X7ifm9tGbZxD6vdH:1yDYg6bwp/9Q1c1b3FiuX+HI8oqu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 435525be9bd54266b45a1aab4dd6d617_JaffaCakes118
Files
-
435525be9bd54266b45a1aab4dd6d617_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE