Static task
static1
Behavioral task
behavioral1
Sample
6a439bb174b8ee67e3c5765a4f7eebca_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a439bb174b8ee67e3c5765a4f7eebca_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6a439bb174b8ee67e3c5765a4f7eebca_JaffaCakes118
-
Size
56KB
-
MD5
6a439bb174b8ee67e3c5765a4f7eebca
-
SHA1
16d0ab1a79e911b4306d13e8547f78f72f968643
-
SHA256
460dc2aa284d06a2b326811cf1821338d8de19144a8e11737ef8ea32a7883cf8
-
SHA512
bbb029a76e100e08ddf09c71d8c2a7b1caa4973c374c5c682c14e60d74cfce483ec8fbb1928abd7eccb291fdc5459ac1b2562a64dce029266d9d48d9f77eaf68
-
SSDEEP
1536:FA3RoP1LhuKWm8Qv1dg/6zFQb2wqgtDz/:KRoP1LhzWSds6zFQb2PgZz/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a439bb174b8ee67e3c5765a4f7eebca_JaffaCakes118
Files
-
6a439bb174b8ee67e3c5765a4f7eebca_JaffaCakes118.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 828B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ