Static task
static1
Behavioral task
behavioral1
Sample
5b0c26d60a2f78e12639db499447315f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b0c26d60a2f78e12639db499447315f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
5b0c26d60a2f78e12639db499447315f_JaffaCakes118
-
Size
76KB
-
MD5
5b0c26d60a2f78e12639db499447315f
-
SHA1
c6078c9b7a2ef821dea1d4d424b498c50a2dad8a
-
SHA256
b727a7d8441e4cc530aa0826cba88c2a39ffa03d3b7850f1617006f9f330e5b3
-
SHA512
7b10fcf2dfb583c29341f99dc056ab1a82abc5e586b324510cf996e895c251b84f3ea54e7ebbbc99862418cdce5cb0af150cb5ad2bf8090dd08e683f718812b1
-
SSDEEP
1536:gFUz8r3tPMtBgjN1uRmVe59I31aU1VcXy2UtTAAUGfIf807wDF1pamuTzEd6Pp1d:iY4dYBGoRt9Ilf1h2UdvUMIf8cGF14Hv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b0c26d60a2f78e12639db499447315f_JaffaCakes118
Files
-
5b0c26d60a2f78e12639db499447315f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.rdata Size: - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 75KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE