Static task
static1
Behavioral task
behavioral1
Sample
6f31bedd1b0167ee4edd0af79fb2858f_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f31bedd1b0167ee4edd0af79fb2858f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6f31bedd1b0167ee4edd0af79fb2858f_JaffaCakes118
-
Size
17KB
-
MD5
6f31bedd1b0167ee4edd0af79fb2858f
-
SHA1
730008dde050a3361be010c9f469c3d060b963ab
-
SHA256
d5a2a83794acdc67ba20ff6e128b1a33649e10cd9d383d8d374b6ffe94b67b2d
-
SHA512
12e7f8b9db197f017f4da8783889e0e4b696a9eb4f545eeaa1fced2f695dbffb8cf703ccc0718da62870f65153d4349f8a236d2c0f67baf107508b3d175a1c91
-
SSDEEP
384:Ta7VgSK+2LXkBqVF3A3As4mqFZPIbmD2EAV/z1ge4wm3F48Q:m7gTTS3As0FZPAd71rm1G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f31bedd1b0167ee4edd0af79fb2858f_JaffaCakes118
Files
-
6f31bedd1b0167ee4edd0af79fb2858f_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE