Static task
static1
Behavioral task
behavioral1
Sample
65f134e412356169d99d8f78a5d1f9e7_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65f134e412356169d99d8f78a5d1f9e7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
65f134e412356169d99d8f78a5d1f9e7_JaffaCakes118
-
Size
22KB
-
MD5
65f134e412356169d99d8f78a5d1f9e7
-
SHA1
5d1eb3562671ef9694a195d16d83ae0619879823
-
SHA256
d37530801599e394f5041ef5c6a38418e3c96fea100876aba0430a61335964dd
-
SHA512
e40b961281badfece0969a92a9e20bad634555788f4e1b155bf7ed87144c443dab0d7ea13342e9c22b707384f958ced6b3b2b4e32420d4781f205fd3d1cccf46
-
SSDEEP
384:qYWWTEcWlypHksHzgHIhL9x7kHp3FG14VApXVuZl/xxAomMuD0+OICc:qTuHksEHnVG1duZl/xV7uY7w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65f134e412356169d99d8f78a5d1f9e7_JaffaCakes118
Files
-
65f134e412356169d99d8f78a5d1f9e7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE