Static task
static1
Behavioral task
behavioral1
Sample
63905035a8151ef3110cfd956c7edc80_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63905035a8151ef3110cfd956c7edc80_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
63905035a8151ef3110cfd956c7edc80_JaffaCakes118
-
Size
90KB
-
MD5
63905035a8151ef3110cfd956c7edc80
-
SHA1
089d987fddce44821c61a522e5b39c0036310113
-
SHA256
25b7ed6184af7ac1a991480abbdcd1df1338c611c417c4d3dd3f272ce0b8ccfc
-
SHA512
8aa667d58db5616b58ff46ed6731bdcc7a535e201b52a3bf82d15587223eef7bc5ec6dc09762756cd8788139b026ec53b25a1b1e12ef7519b10e7feed1ae288d
-
SSDEEP
1536:51C6jnVI8xWfSO+c/mSCTL2rQGCz0XjIj9xy2n1bnNtTyOshkjOi6aec8R02S64s:5Q6zIfSOXpC32r6z0XEj9xy21TzTbLOT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63905035a8151ef3110cfd956c7edc80_JaffaCakes118
Files
-
63905035a8151ef3110cfd956c7edc80_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE