StartDaemon
Static task
static1
Behavioral task
behavioral1
Sample
60cc117ff874c49415dfcbc151765d02_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
60cc117ff874c49415dfcbc151765d02_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
60cc117ff874c49415dfcbc151765d02_JaffaCakes118
-
Size
7KB
-
MD5
60cc117ff874c49415dfcbc151765d02
-
SHA1
89d50617d4f85a4390bed611557b3d99adec4a04
-
SHA256
257e74dea26f817798afe01828df684a6d6d140c4c3ba050b3e332d247ca863e
-
SHA512
9f641bb3b27504be7b6384864b3c184651c7b2f4a55a96495685ed56f574d1157be3c8414ff2f2f539b6e6077b0207f758851969b8cccce9a670c186211b3fce
-
SSDEEP
192:0Y0BthyDqJZkHixby0g31KfMHAVflWuPQkgUw99:0Yuu8Xby0glKfMHm9WunG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60cc117ff874c49415dfcbc151765d02_JaffaCakes118
Files
-
60cc117ff874c49415dfcbc151765d02_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE