Static task
static1
Behavioral task
behavioral1
Sample
611660b239ae8dba9969b0a055840bbb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
611660b239ae8dba9969b0a055840bbb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
611660b239ae8dba9969b0a055840bbb_JaffaCakes118
-
Size
8KB
-
MD5
611660b239ae8dba9969b0a055840bbb
-
SHA1
76c9d6bd25e6e2e71dea1a9e379bcc4a2cc26a46
-
SHA256
41467a75659068a084599be7fedc1710ef2340cebb014cc2f14c3f69a086d4ec
-
SHA512
b0529c37071126c4c7c24a5b934b057ff443c46a3e002e4f5e226750cbf4924fa2a8dca5e54a8cb714bc04821b3fe6c5a2135a924534d442a78d6935b9a61e06
-
SSDEEP
192:skKXjuoFiJSJG7y0sgfFJuFuNorgeCtlkgUwuJ:s1juxWG7y0scXDNSgxtKT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 611660b239ae8dba9969b0a055840bbb_JaffaCakes118
Files
-
611660b239ae8dba9969b0a055840bbb_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE