WSPStartup
Static task
static1
Behavioral task
behavioral1
Sample
62652610cdfd8e0860578cc46e78df88_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
62652610cdfd8e0860578cc46e78df88_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
62652610cdfd8e0860578cc46e78df88_JaffaCakes118
-
Size
21KB
-
MD5
62652610cdfd8e0860578cc46e78df88
-
SHA1
b0be66fdd16d91dd75a6a0fd79833dd1b24338c7
-
SHA256
7777b04fdb2fcddf8d921138a6db870f48dccd3daa1af37addf9dbc3b5e311e8
-
SHA512
cb9964567ff9678ab86a958df48db0e7b1c9087762071419100c5b1012fed59d45f58919c281f8a53d3ab8ff55d2aa05cf55af5e5813580af58422e872f875dd
-
SSDEEP
384:/GYG2vDs/cMlFISliv3i91J9V83y9Sqco1+G+5YhU8Prulk0YM2gryL0gQZ3TfJC:OYG2IkMlFHsm1JL8RKsV8PIdEJL0gw3Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62652610cdfd8e0860578cc46e78df88_JaffaCakes118
Files
-
62652610cdfd8e0860578cc46e78df88_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.upx0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE