Static task
static1
Behavioral task
behavioral1
Sample
6ada13bb46f50a6f743095cefb391aeb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6ada13bb46f50a6f743095cefb391aeb_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6ada13bb46f50a6f743095cefb391aeb_JaffaCakes118
-
Size
23KB
-
MD5
6ada13bb46f50a6f743095cefb391aeb
-
SHA1
a3a8944f9ba3ba621bc92fcebe207b8cba4448f0
-
SHA256
85b388a275d2e34a1d69ad603233d776e9b696bb902ebd5f516094d666fced06
-
SHA512
90e6b6f4eacb25f89d90ce3490a37caaa004d8f603bcf1556ca3cd64641487b36e4b0e6585be07f2886e27c350342854d59be3ea53c4d48f20ee97b3ed558d6e
-
SSDEEP
384:triIPWzfEB+yiVtI89IrjNdPnaoQtYk8qfan8JeyFj5SMGMSoAzlhAD/gF5:qDI8q9JniYotJe4CzNb2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ada13bb46f50a6f743095cefb391aeb_JaffaCakes118
Files
-
6ada13bb46f50a6f743095cefb391aeb_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ