run
Static task
static1
Behavioral task
behavioral1
Sample
605befbcf905cec4875dddcff6f9c0e7_JaffaCakes118.dll
Resource
win7-20240705-en
General
-
Target
605befbcf905cec4875dddcff6f9c0e7_JaffaCakes118
-
Size
14KB
-
MD5
605befbcf905cec4875dddcff6f9c0e7
-
SHA1
15b6e4ff35c3bd5df5a33bc5f5b3398afb2c1563
-
SHA256
de1ed6d9bf7a6ab6e647291ead1d1ec0c7089c11923b67c6f4a7e783745f748e
-
SHA512
12f1744e17473330a2313c4e66e9b5220ba0bc2311345e31b61e5ae12aaa69cd257e7951619a7fe840008f073a62acbe5a242d7fadf89d1fe28b08041a7989ec
-
SSDEEP
384:pVQUffra2vDYZM8tt5z8CyUU7LqzBfoZGLpCbOsd1i:HQU7a2TI5ccdmGLkiGk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 605befbcf905cec4875dddcff6f9c0e7_JaffaCakes118
Files
-
605befbcf905cec4875dddcff6f9c0e7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
�\�B0 Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�\�B1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�\�B2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE