importdll
Static task
static1
Behavioral task
behavioral1
Sample
6a3db342b83671bed55fad97322731e7_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a3db342b83671bed55fad97322731e7_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6a3db342b83671bed55fad97322731e7_JaffaCakes118
-
Size
44KB
-
MD5
6a3db342b83671bed55fad97322731e7
-
SHA1
3caef0b52033a9a15782704f93d8c3d491edae24
-
SHA256
94e07988bc0091c3b3c7c39d4466e45ca08231b264223977d394ff242d211199
-
SHA512
fd9aad050ae47a1171ff31156f5baa4f49244de6bdf88135e96727657985cb7a1d2ee8643b32268d85d6e8c9c7be2cde2457d38de51e26f1d14c28b762cc5dab
-
SSDEEP
768:O2TsTdA1Iz04kZlYV7Xn090u/EfStIZb2egtrcmX/tri30WTmu1pXLKP:O24xIIbwlY5DucfSeZaearZtri3paEuP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a3db342b83671bed55fad97322731e7_JaffaCakes118
Files
-
6a3db342b83671bed55fad97322731e7_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.nsp0 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE