Static task
static1
Behavioral task
behavioral1
Sample
69d4b5bbba1ad7bedd86d40d3c583dc2_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69d4b5bbba1ad7bedd86d40d3c583dc2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
69d4b5bbba1ad7bedd86d40d3c583dc2_JaffaCakes118
-
Size
796KB
-
MD5
69d4b5bbba1ad7bedd86d40d3c583dc2
-
SHA1
7fb33fbe5e5d9afa1af9a625c71a51776e006bfc
-
SHA256
0add91d3b0954c399b2e0e332370df60c68be2600bf7ee68859e09bb66c9768d
-
SHA512
7bc11304cfc177c74a05d71cf19beb7fd1ee5fd551721b20ea082df83c2c279c79afe786a43086fb5fd328e2e3aaab3fd58ed80d6823158c71d9a852be364326
-
SSDEEP
12288:YrGQ0uU7BaVw5ximX6VCIXwYa2EEY0N7GkzqnIpQgeCm7bW4hh31X54blEb+f59P:LuUNaAioq5HH7G3nIPEFhh3lhg9uS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69d4b5bbba1ad7bedd86d40d3c583dc2_JaffaCakes118
Files
-
69d4b5bbba1ad7bedd86d40d3c583dc2_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
EPE0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EPE1 Size: 776KB - Virtual size: 775KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE