Start
Static task
static1
Behavioral task
behavioral1
Sample
771a1859f942076ee8c13f1b763950d4_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
771a1859f942076ee8c13f1b763950d4_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
771a1859f942076ee8c13f1b763950d4_JaffaCakes118
-
Size
211KB
-
MD5
771a1859f942076ee8c13f1b763950d4
-
SHA1
215698a51f17a3ca09cfea43199a33d4731dad10
-
SHA256
4e472a04bae28a14bf7ec3fdbfc7b0103c49b5431c9ae36604b5b2a03f5fdbca
-
SHA512
e10c0ec19373e25cc5d2bf36e0f4d691828e1f46acf772e5ea19cc1e49166745d01494be1dfb5f7d6c466e3c237ff2f6f0a101ebb1575740e7154658411ca33e
-
SSDEEP
192:ROYaz4/HxMMeNl0Clx7j9E1uo7u5ugNx6YyI9lKvIpkgUw9w1I:ROp458lxji197augD6YyIGImA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 771a1859f942076ee8c13f1b763950d4_JaffaCakes118
Files
-
771a1859f942076ee8c13f1b763950d4_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Exports
Exports
Sections
.Upack Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE