Static task
static1
Behavioral task
behavioral1
Sample
693cabef73cbfcf4877f695948b10176_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
693cabef73cbfcf4877f695948b10176_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
693cabef73cbfcf4877f695948b10176_JaffaCakes118
-
Size
104KB
-
MD5
693cabef73cbfcf4877f695948b10176
-
SHA1
4427c1dcb81df10c7cbf51b7f231326a32237f50
-
SHA256
24b0a2b743fc2605aefd347f49ec8e629314024a2bca0c71d32fe2d85311e233
-
SHA512
8ee221961af6819e4c0983bcab050e93c1473d4695cda33a2e8a768f777f13fa6b0a54e8ef653cc182a9752a00840333d53a5499951192cf7d0eb0cf47c10597
-
SSDEEP
1536:XMAVUTlIQMRy0WdC8nNKirtNHLbjvxcFTyZR7t:kTlIQx0WdCMKiJNHnL2FOZR5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 693cabef73cbfcf4877f695948b10176_JaffaCakes118
Files
-
693cabef73cbfcf4877f695948b10176_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
r8p Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
leo84p Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
spidr Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE