Static task
static1
Behavioral task
behavioral1
Sample
6162a659245db7a72ce7bfec111381b0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6162a659245db7a72ce7bfec111381b0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6162a659245db7a72ce7bfec111381b0_JaffaCakes118
-
Size
12KB
-
MD5
6162a659245db7a72ce7bfec111381b0
-
SHA1
35483bcd8eafc1fa10b7c1a91f0391655437b976
-
SHA256
4e695a4013ccc6e47d297e0e555c4dbbfd7ec8253b62e43dd5cd2bb55ada7785
-
SHA512
a209bd2371945005ddc86bebb71ddf8f9b57f2faa488bca7f3ffad36ab607c7407ea44c7bc5ce6f9a35dbc925817a4e35604ac2fadf271abf06cc21c31d7b5c7
-
SSDEEP
192:w4rO+f9LGrcE44P7Kny/JF+3+PYLY+TqnSdXgipRpHIqM0s:7rPk1eyxJ5odQeeD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6162a659245db7a72ce7bfec111381b0_JaffaCakes118
Files
-
6162a659245db7a72ce7bfec111381b0_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 644B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ