Start
Static task
static1
Behavioral task
behavioral1
Sample
6823b39c14e0697c0fb1da025befef31_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6823b39c14e0697c0fb1da025befef31_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6823b39c14e0697c0fb1da025befef31_JaffaCakes118
-
Size
12KB
-
MD5
6823b39c14e0697c0fb1da025befef31
-
SHA1
b5965f079d0e857052a65cecd7a4c74cfee104c3
-
SHA256
81e37bb9f9d5ca7dc731fe3ec18961575af6b8c89a63846b180a7ed515eebcc3
-
SHA512
72427f550e8ecdf1fc8f328e7a1e37c6df7b60d0f11f07aa842fa33e9c1df04ad3a1b62d238d52adacb3b47a962ca1862f6fcb785e2ce0b141b966ae68ccf804
-
SSDEEP
384:WnmCiz6mBbOupgoC7+knM2fZ8baRmHU3dxjKu:WnmPz91O7oegIZI/03d7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6823b39c14e0697c0fb1da025befef31_JaffaCakes118
Files
-
6823b39c14e0697c0fb1da025befef31_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE