Static task
static1
Behavioral task
behavioral1
Sample
669677db5414c2801b9c379c90c47857_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
669677db5414c2801b9c379c90c47857_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
669677db5414c2801b9c379c90c47857_JaffaCakes118
-
Size
26KB
-
MD5
669677db5414c2801b9c379c90c47857
-
SHA1
c839ba09b391f9072b9664e64884e5ba7c146fc2
-
SHA256
339d499de5eef6d3f62f804143be750006b9e6659831fcf9df6a6794270dd69a
-
SHA512
6067e1d069eedbc9bdda5dd813a363bbd82642cca5afdbd625b29887ece18283aec05c086dae2035abba4aaed9b692ee4feb30d7bb01b906af0c0dd8b23b526e
-
SSDEEP
384:F7swBgHFVE5BE6gg0CB3NRc6ekQyLMMkLsBGIjeWYby+bpddX/y7JaAL/6jYAcc:aN0XE6gB/6e4MMwsR6W0td1OkALijC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 669677db5414c2801b9c379c90c47857_JaffaCakes118
Files
-
669677db5414c2801b9c379c90c47857_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rcsk5 Size: 947B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE