Static task
static1
Behavioral task
behavioral1
Sample
6a308a941d433201728c080b7c5e7b63_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a308a941d433201728c080b7c5e7b63_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6a308a941d433201728c080b7c5e7b63_JaffaCakes118
-
Size
26KB
-
MD5
6a308a941d433201728c080b7c5e7b63
-
SHA1
a70a3778825973a0df9aaf591ffb6825e35c0b02
-
SHA256
a8534ed1c5478ac073368b2683fa48d2dd481a6d7510997c798e66c285fc0603
-
SHA512
43c0ef12656fda4305b1d01e1de4419cfb91fe4024d5c3e3568f823f4e4fc2e5316a13dc53ca065f7b9660628d61a0fed1496f16cedbe61a065688de86d8d76c
-
SSDEEP
384:gW+6vCMhcdVvyunE1YTQcBf4H59s0DUSyGYgD6ScN5oigrubp8ada:xCMI1E1LoEzsHGHD6SGoiqSaa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a308a941d433201728c080b7c5e7b63_JaffaCakes118
Files
-
6a308a941d433201728c080b7c5e7b63_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xi Size: 121B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE