Static task
static1
Behavioral task
behavioral1
Sample
6fa3a1098e2ea156f18a1f323e436c2d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6fa3a1098e2ea156f18a1f323e436c2d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6fa3a1098e2ea156f18a1f323e436c2d_JaffaCakes118
-
Size
126KB
-
MD5
6fa3a1098e2ea156f18a1f323e436c2d
-
SHA1
056e585331450d61aca4b31f103c1eb50ee39195
-
SHA256
5ad7c4fc5f5ed5595514a80338d37b568e337f31e3d757a8e63b0239d6a5d75d
-
SHA512
4811522b50c54594166e5275600c7303a0866e90127e626be275af801e8dabf5d1528f0eb363ebd8f37f35ce1759f7b38feccfaf69085e3920b4cd9ac08b4267
-
SSDEEP
3072:91bk1b2W2WymY2IwymY2IwymY2IwymY2IwymY2IwymY2IwymY2IwymY2Iw:zUKfRd2kd2kd2kd2kd2kd2kd2kd2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fa3a1098e2ea156f18a1f323e436c2d_JaffaCakes118
Files
-
6fa3a1098e2ea156f18a1f323e436c2d_JaffaCakes118.dll windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ