Static task
static1
Behavioral task
behavioral1
Sample
6908cca26e7f9fda2f131a4036b6f58b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6908cca26e7f9fda2f131a4036b6f58b_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6908cca26e7f9fda2f131a4036b6f58b_JaffaCakes118
-
Size
83KB
-
MD5
6908cca26e7f9fda2f131a4036b6f58b
-
SHA1
3718da1ee18a190be111a25a9ec2bed9e65357f8
-
SHA256
7f8a5bfac01df5027fb44c29f1eea7ff648967ae89cfbf9a031951f78c28fb11
-
SHA512
dc5039414817e06a1121deb439c28b0c52093518044790b45b2cc2687b22da2c8faea1cdd973a534d307584bea00f5a23a12673d987b5929bf78cd45f224aa19
-
SSDEEP
1536:reIzXEDkp6iEvNbvWH9GMnem0nyEIPBzzkIOTvW:rFQIoiimQMeyJhs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6908cca26e7f9fda2f131a4036b6f58b_JaffaCakes118
Files
-
6908cca26e7f9fda2f131a4036b6f58b_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
9sagvsma Size: - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q5 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7uebp Size: 4KB - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE