Static task
static1
Behavioral task
behavioral1
Sample
5f97e215458056ee4b2207eaaeb6d0c7_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f97e215458056ee4b2207eaaeb6d0c7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
5f97e215458056ee4b2207eaaeb6d0c7_JaffaCakes118
-
Size
71KB
-
MD5
5f97e215458056ee4b2207eaaeb6d0c7
-
SHA1
1da7927d9c8d08b653c5913a223491c7ef8841ad
-
SHA256
2949cd979bfa9e6afd155f8c2c88d9b0916c29de2b7eca9fe1ceacc7f4506ab9
-
SHA512
ef97f7db442762a1c20e79d306b9b14ce159b625b9c2c0472dbc140c6aa8f9263017565e1006b41a0c4a18534b58388c3297a50878eaa2c1d716cf22304dc8fd
-
SSDEEP
1536:XfLiPJg9/dOMQGmE35VELqrHuSBJi128shv+bDr35VY:XfLKJg9/drQGmHLqrOS7i128jY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f97e215458056ee4b2207eaaeb6d0c7_JaffaCakes118
Files
-
5f97e215458056ee4b2207eaaeb6d0c7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
uk48hi Size: - Virtual size: 144KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g5 Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tf4icbo Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE