Static task
static1
Behavioral task
behavioral1
Sample
617eb1a8a677acbc97fa51b0568e2291_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
617eb1a8a677acbc97fa51b0568e2291_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
617eb1a8a677acbc97fa51b0568e2291_JaffaCakes118
-
Size
148KB
-
MD5
617eb1a8a677acbc97fa51b0568e2291
-
SHA1
3aeff2f65d79467b5e3c4e41513b5fd6dd8ccf22
-
SHA256
663a0afa3fe6e969a5f01d4cef9d6e45d03f72cb4437c86d7530bc5ac0dff508
-
SHA512
12113b2d218d9ac55b4de71dafda8236cdbc23e8eddf849c62095246609030ab7ba1d8a69ab5e9442b7834b070667ca9d9f8528eb70a37bcbe4ad514e6ca5d63
-
SSDEEP
3072:WouwL8NJLeayDiiDB7YCTsZOjB8mEiww4vOsDWg4:buwgqavCwsj2ib4vV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 617eb1a8a677acbc97fa51b0568e2291_JaffaCakes118
Files
-
617eb1a8a677acbc97fa51b0568e2291_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE