Static task
static1
Behavioral task
behavioral1
Sample
5df12c3b44d5cd5c3a195dfefcb0cd7b_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5df12c3b44d5cd5c3a195dfefcb0cd7b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5df12c3b44d5cd5c3a195dfefcb0cd7b_JaffaCakes118
-
Size
20KB
-
MD5
5df12c3b44d5cd5c3a195dfefcb0cd7b
-
SHA1
93bf620ee95e827c9bdc788cea06e47902046316
-
SHA256
dc36a6ffd001b5379ad6b61ec2a2d0e7b3d9958d1526b0eadc5f781107116d21
-
SHA512
496f8a50cd91c07759f1d62f6f4335bb3adda20063a28c2ba37ce677eeaa0ee7183300e6af0fa5e648290fb007571ba9d1899f92e47316f2a9fe79a66a216cca
-
SSDEEP
384:r9qE57/grub5Iws1+N4LP7Nlsb510b/GfKD4qKGORCZA6UL9:r9qE5VJ864LPcbD0bp8tGHZArR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5df12c3b44d5cd5c3a195dfefcb0cd7b_JaffaCakes118
Files
-
5df12c3b44d5cd5c3a195dfefcb0cd7b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE