Static task
static1
Behavioral task
behavioral1
Sample
68e8f09491ac73afa9e07243465eec5e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
68e8f09491ac73afa9e07243465eec5e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
68e8f09491ac73afa9e07243465eec5e_JaffaCakes118
-
Size
5KB
-
MD5
68e8f09491ac73afa9e07243465eec5e
-
SHA1
bac1261cc765e7ba91b4d93b35340e73ffcbcbc1
-
SHA256
405e2d00ab4a0366d11f4a103db120c0d338e433702bb2987bdc4b0398fd1a11
-
SHA512
892fc523a15168813a06a13990ef5e1b6fe77b6ae5b7b3ffaa57c3b4a9b8772f139556d64ded6653585a8a4236e0588902cc9558f3e054988d09cc874a2dd880
-
SSDEEP
48:i2K+5hgjje2B2b875lb63QrdgerKLfLDHJmMgNG:jbh2LM874ckHdCE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68e8f09491ac73afa9e07243465eec5e_JaffaCakes118
Files
-
68e8f09491ac73afa9e07243465eec5e_JaffaCakes118.dll windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 114B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ