Static task
static1
Behavioral task
behavioral1
Sample
69cbd2648e165a7fb7941e4eb8d986d4_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69cbd2648e165a7fb7941e4eb8d986d4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
69cbd2648e165a7fb7941e4eb8d986d4_JaffaCakes118
-
Size
306KB
-
MD5
69cbd2648e165a7fb7941e4eb8d986d4
-
SHA1
0f25f01f94d0a7a4c2ed79b5b73877abd477a2ac
-
SHA256
efe3d95fe9fcace5489412a8eb03832e344ed12ce64da186f205415d2b476c8e
-
SHA512
bf49618c0b99cc86703651777b076753890b7bcfc68cd5c4d0dfec0a4903a01c314511a6cc42bd61796885044b2b80788421f2f90a161da209a5cfbe8e5abc52
-
SSDEEP
6144:k5QpZGqoblOwc2LhMsh+zCZZ30Efy2uOSvL0eZtWPylwJDNJi:k5Qeqs0wc2Fh+zCP3KOUL0aWPvNJi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69cbd2648e165a7fb7941e4eb8d986d4_JaffaCakes118
Files
-
69cbd2648e165a7fb7941e4eb8d986d4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 299KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE