Static task
static1
Behavioral task
behavioral1
Sample
6064ba496d2f8294b5c89a1d6061e675_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6064ba496d2f8294b5c89a1d6061e675_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6064ba496d2f8294b5c89a1d6061e675_JaffaCakes118
-
Size
14KB
-
MD5
6064ba496d2f8294b5c89a1d6061e675
-
SHA1
22ad4305ff9a11a04b9df5f062083efd5c4cd069
-
SHA256
c88a7afeec238babf49d7a4065fe90b0313a1325909a9333bbce9088cdf706b4
-
SHA512
98a9b494a2aa76a52ad2f9d065f5c4bfa98e1a57ada30241452f9cefd7baf3779d290f43135b951c3a72e89dc189a3360aaefa0e6b840f43375d4c4db6e387a6
-
SSDEEP
384:Wl3ms/o9IlADqGaLNo1VTNsaiMCIl0tKw:iWsw9IGEL+5Nnib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6064ba496d2f8294b5c89a1d6061e675_JaffaCakes118
Files
-
6064ba496d2f8294b5c89a1d6061e675_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE