Static task
static1
Behavioral task
behavioral1
Sample
5da1816f9093478d0aca5c91635f36c2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5da1816f9093478d0aca5c91635f36c2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5da1816f9093478d0aca5c91635f36c2_JaffaCakes118
-
Size
136KB
-
MD5
5da1816f9093478d0aca5c91635f36c2
-
SHA1
e1b5f5c06af96aa06acf5530008ac79051b97fa9
-
SHA256
b503f32e8c71aa60b7ba03744eb9657f227910d69e04596f8a35b94ff08c4bf6
-
SHA512
9b30455bc85012f1d18627104f2b80d76f8ea1d72595eb8c3064d9b814106da6564c6f3e1ddf836806c2b6eb25e76e84991740e092f0f1d40836ef3e9cff62ab
-
SSDEEP
384:yKxoM1LPDuiKQv0qDtLJjLHKcFX4uBBQARQkAGeNoT7aWi11NLUjPrTJub:z1+elbXvBBQARQkAh5/XLITw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5da1816f9093478d0aca5c91635f36c2_JaffaCakes118
Files
-
5da1816f9093478d0aca5c91635f36c2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE