Static task
static1
Behavioral task
behavioral1
Sample
6fb5117dec28a509cc6e2ea20c37e803_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6fb5117dec28a509cc6e2ea20c37e803_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
6fb5117dec28a509cc6e2ea20c37e803_JaffaCakes118
-
Size
48KB
-
MD5
6fb5117dec28a509cc6e2ea20c37e803
-
SHA1
f6a8b166f31113e083f22d4039085087b5126bb7
-
SHA256
e479ab6c713178e293683f4b562c3aa38b863d0909825235fa6e4e67c6097e6f
-
SHA512
e06438a5f84e974c83cabed29a33bbe79aab37f96a6936a38261f514eb5d0cd8de0d9cd10acc7aacfcda41f6cc150aa7d7845b0b6135d0b039e55ec0441f31c8
-
SSDEEP
768:sUgIibRTWBfTby/wnKLD459BTx6yQ3E9WlYJaBwohbPDD8bW0wrwDiwaefnrp4:sU/UoBfTAI5nTZLWl5BwMPDD8bIrwDiT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fb5117dec28a509cc6e2ea20c37e803_JaffaCakes118
Files
-
6fb5117dec28a509cc6e2ea20c37e803_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE