Static task
static1
Behavioral task
behavioral1
Sample
6662641b8dc4a056c8f264090c3fa3b5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6662641b8dc4a056c8f264090c3fa3b5_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6662641b8dc4a056c8f264090c3fa3b5_JaffaCakes118
-
Size
65KB
-
MD5
6662641b8dc4a056c8f264090c3fa3b5
-
SHA1
4a68196eef2abf28d7e10917d0624c710dadd999
-
SHA256
f45f19141851c463a7cf571e81db6b0b9e312c8698e4ae9a7b1b6227e16ecf6d
-
SHA512
1f4a137f75d2c5d5cb7cd0b0bc0cab833c3c9b5562fcda64665c4055b96da38136126b744cc77318f4289ffe01c20ff928a1cec01b062032cab18da93455e49e
-
SSDEEP
1536:kk6DNuEq7Nto7nA/3ufbadkk77y2XaHFi:Dr7Y0sbNka2Xali
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6662641b8dc4a056c8f264090c3fa3b5_JaffaCakes118
Files
-
6662641b8dc4a056c8f264090c3fa3b5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 1KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ustmmfc Size: 933B - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ