Static task
static1
Behavioral task
behavioral1
Sample
6a8c209a9f0858fd04fe7503a6ca01d8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a8c209a9f0858fd04fe7503a6ca01d8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6a8c209a9f0858fd04fe7503a6ca01d8_JaffaCakes118
-
Size
16KB
-
MD5
6a8c209a9f0858fd04fe7503a6ca01d8
-
SHA1
02b1e0b0ae4718bf266e23c7210b5668c9f1de6c
-
SHA256
145c9626142da9ff09a76eac906be1f212aeee9a80f2b98805eb48063b4d364c
-
SHA512
ce881ffe57b14892d0b2162f6178b17fb2ad604b0de8e4c10de10be14e20d5e8a9e334eb9751c65660eaeba776308dd96667f76cb7de5d0afe072e78f6935547
-
SSDEEP
384:B/RcGaIy+8dljRW7sSxbhVLEARFLFpQGiOlOclKtD42NBSt3JGp:vc3DjRysSNhVLrnhlmDpnSt38
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a8c209a9f0858fd04fe7503a6ca01d8_JaffaCakes118
Files
-
6a8c209a9f0858fd04fe7503a6ca01d8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE