Static task
static1
Behavioral task
behavioral1
Sample
6eef3aad3fa988b5ca4d69e8d006442c_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6eef3aad3fa988b5ca4d69e8d006442c_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6eef3aad3fa988b5ca4d69e8d006442c_JaffaCakes118
-
Size
162KB
-
MD5
6eef3aad3fa988b5ca4d69e8d006442c
-
SHA1
225162a2fab39c215ecf4519e9e0b71860e014ca
-
SHA256
9fa47e02a03930310bee6c796f1f17fb62b04925b1d50649865cab64a9e81fb7
-
SHA512
f89a646d87c65f7834cb8c2cd09579f4c06e1c06701fd0bdac9a371ae2aa8c34ac13d1bc946f2c839de54c844ac1827316b7cb11aa1b0bbaa022e06760cf904c
-
SSDEEP
1536:4bB2qSA+3g0d09uO7VX4Q+PoTb3OVq+mkLJ0tORKYzIcnUJc:4pnJ0d09FAPovIq+mkVKO7TU+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6eef3aad3fa988b5ca4d69e8d006442c_JaffaCakes118
Files
-
6eef3aad3fa988b5ca4d69e8d006442c_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: - Virtual size: 172KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE