StartDaemon
Static task
static1
Behavioral task
behavioral1
Sample
607c017122d6238a2551125ebfbd8663_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
607c017122d6238a2551125ebfbd8663_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
607c017122d6238a2551125ebfbd8663_JaffaCakes118
-
Size
8KB
-
MD5
607c017122d6238a2551125ebfbd8663
-
SHA1
d90ae9f87738d0deec60bf438a66d03adba35443
-
SHA256
a14c9a21274b5d0f03c75f26bfb8d1a18a7267177932c5bdffdc94e06223b681
-
SHA512
14f9291cf33604073fbd35f31c193ed860ee340c9ab9c1cc6730123a34841bc8a8511d77f692fc0eeb99e9a42e79631f9aef53a5c90ff72cb0d512a6929b1fde
-
SSDEEP
192:zPOVKBtLkx6NoedadCtfqfq//eC8H2QxWkgUw9/GS0OzVU:zPdBtLkxoBI/inQ/+GTT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 607c017122d6238a2551125ebfbd8663_JaffaCakes118
Files
-
607c017122d6238a2551125ebfbd8663_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE