Static task
static1
Behavioral task
behavioral1
Sample
5e9e538d162565448d9482b64b0b0ab6_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e9e538d162565448d9482b64b0b0ab6_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5e9e538d162565448d9482b64b0b0ab6_JaffaCakes118
-
Size
10KB
-
MD5
5e9e538d162565448d9482b64b0b0ab6
-
SHA1
cbf79d6e2c209d068237a9b228fbdb1ef448e04d
-
SHA256
73d28b13b61123eed02ae2d9f7a8f8b815d3bbcf0b02251131763e6821482458
-
SHA512
61f3dcd7852306415eda36db377e8d8afa35eeb6120efb08abe4b56bdcac129f1c51a54b89084213eb61a6200ce0e1525e6d8a56a700c295b3459d88069e1ba4
-
SSDEEP
192:dgvpACtNhmFM+264LQGMBy9ZH0jSNymoxrxLrtMFpYwB/8hFkgUw9w:mHLZQIZfCSMtgBrT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e9e538d162565448d9482b64b0b0ab6_JaffaCakes118
Files
-
5e9e538d162565448d9482b64b0b0ab6_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE