Static task
static1
Behavioral task
behavioral1
Sample
602a76f625ab25830ea75ca859a2a07b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
602a76f625ab25830ea75ca859a2a07b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
602a76f625ab25830ea75ca859a2a07b_JaffaCakes118
-
Size
17KB
-
MD5
602a76f625ab25830ea75ca859a2a07b
-
SHA1
f4ce6071ea5b54ad81ae385f761de9dfab9fb55a
-
SHA256
33ed6743a62c02573b4205307d0f668d8b95212123b65a291f995608c1b40c3a
-
SHA512
7ae43d9af2c12183b26fe471b5f93e68bc03775504019fbfb2dd1e046aec6939b75e64237890bedf18ee0b40c8691aaac9097f4fee967ef1754a315fc6902784
-
SSDEEP
384:D+l5I6MCI8vNu9cr4RuBKtwFWdlKzethOLlDBPETmAhKH:D+l5IjZ6c9QCNGFfzetKHPEXe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 602a76f625ab25830ea75ca859a2a07b_JaffaCakes118
Files
-
602a76f625ab25830ea75ca859a2a07b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE