Static task
static1
Behavioral task
behavioral1
Sample
5ca97f46b4df272652e63689f3c7d8d7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5ca97f46b4df272652e63689f3c7d8d7_JaffaCakes118.dll
Resource
win10v2004-20240704-en
General
-
Target
5ca97f46b4df272652e63689f3c7d8d7_JaffaCakes118
-
Size
134KB
-
MD5
5ca97f46b4df272652e63689f3c7d8d7
-
SHA1
5c0260d086624f20bcca8a5c9c694a26fad65c55
-
SHA256
839bc763e93abd38e8d301a3657555e874551f4442a1f495da4c72c046a195c3
-
SHA512
ed96c24fd963a6640eb1d72f4c504c336419e07740e6f6d0960a096b9c638e693c523679483a783e970688723d77b4b1c44cca03b588b73cc1c3e2018b314483
-
SSDEEP
1536:ziGE+ei30O0L7Fppo4aCzLZQmvc/G9T/Jo/GE06T:zxeikO0LpDUCfrXp61
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ca97f46b4df272652e63689f3c7d8d7_JaffaCakes118
Files
-
5ca97f46b4df272652e63689f3c7d8d7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE