Start
Static task
static1
Behavioral task
behavioral1
Sample
5c99a3cc2575280d0a8042123d633b10_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5c99a3cc2575280d0a8042123d633b10_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5c99a3cc2575280d0a8042123d633b10_JaffaCakes118
-
Size
12KB
-
MD5
5c99a3cc2575280d0a8042123d633b10
-
SHA1
d78bac7b32d92795e5aab9b862e7134d8ddce614
-
SHA256
69cc2ce2101942018a1d0ad6e827f0edec1be2ce123638de74ed0df6dc59410f
-
SHA512
9f8c0170caa029faf48936ce5caba707d79f42ca03fbd40e8d73c08f8dc64c6b97f1b5ab6e77046b20986613fa147a18b4ca88e80bfefd4f17bf5206711749a8
-
SSDEEP
192:jl706uPinf5qmXkN5Cib5ruhSUgDf+DQsZSKZGDoRGb1XaWVjhV7DmQFp7FUkgUx:jlA6myplBhSU+d0S5cGb13HD1x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c99a3cc2575280d0a8042123d633b10_JaffaCakes118
Files
-
5c99a3cc2575280d0a8042123d633b10_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE