Static task
static1
Behavioral task
behavioral1
Sample
5c84d191cdac6383635dc8e4247574d7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5c84d191cdac6383635dc8e4247574d7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5c84d191cdac6383635dc8e4247574d7_JaffaCakes118
-
Size
81KB
-
MD5
5c84d191cdac6383635dc8e4247574d7
-
SHA1
c96921b9d66056995f37731b06840fc2a0f9bf2e
-
SHA256
8c10766b409b1ed19a88e17ac0e63ed19fe273d921ba75336f286398486c4c5d
-
SHA512
52e9aebc824be705252b2b344e1d9fc7f715239d42cf0e0d11e4b81dc634118218f288c506eb8e2f151cb71e432940f7fbe7bbb59b05a9e5ebfd81dc0b7a6494
-
SSDEEP
1536:GjbW89XQ7DH62ZnrweUXSR0zss8GSq59LcR3WlK9cy:Gjbp4ttweB0g/Wto3Wl9y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c84d191cdac6383635dc8e4247574d7_JaffaCakes118
Files
-
5c84d191cdac6383635dc8e4247574d7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 18KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE