Start
Static task
static1
Behavioral task
behavioral1
Sample
5d979ca0a4fb046326f2dddc59559000_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5d979ca0a4fb046326f2dddc59559000_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5d979ca0a4fb046326f2dddc59559000_JaffaCakes118
-
Size
11KB
-
MD5
5d979ca0a4fb046326f2dddc59559000
-
SHA1
8b576c99643dd3684ae5bbd85fabec92fe30b1f8
-
SHA256
16ed2ff8e145ce019681dbcb3aae2fe84d524bcb612c70a0198918f48259d02a
-
SHA512
f31b7aa6c3020bfd25e02054c43a1041e0f2d7724d6b146fc4d116c9849511d2cc3f8131c448d66acce40b8df60df8c881817f21f4ce77a22ee057685cf90f23
-
SSDEEP
192:kqHOjpPivjX2V39V+6HkfTtdrjDCU/W6ujtzJ7lTzDtZ3i/yf8CdxZKkgUw9r:lj2VNV+ptd2U1ujtzvTzxKKdnF8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d979ca0a4fb046326f2dddc59559000_JaffaCakes118
Files
-
5d979ca0a4fb046326f2dddc59559000_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE