Static task
static1
Behavioral task
behavioral1
Sample
6f2a301f02705123f3dc83331a2e83de_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f2a301f02705123f3dc83331a2e83de_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6f2a301f02705123f3dc83331a2e83de_JaffaCakes118
-
Size
24KB
-
MD5
6f2a301f02705123f3dc83331a2e83de
-
SHA1
316d21afa97b83d80c89345c575dda17cf485059
-
SHA256
e4f30011b801f95472fcda4db52a51c337620dfbb60143b8815516da4618e81b
-
SHA512
34ef82055c1d48978801b3647e7d7082a41683aded10371679054e844b685b7ab699b96ec1cd5c2f9690bdb5216e1865b7ed9b77b4f45ff647266e4b4f3db1fd
-
SSDEEP
384:3BmpovMMcr3XqSbDntJCKaatiYNVWx1hs9D/fvImIb3c0tWeYvMTDLWhL1Ak4QlK:IpkM5LPbLtwKHiiVWLhwgvcqWevnQlKN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f2a301f02705123f3dc83331a2e83de_JaffaCakes118
Files
-
6f2a301f02705123f3dc83331a2e83de_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 698B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ