Static task
static1
Behavioral task
behavioral1
Sample
81df3c41c9bf1dd0ef1e90727d35d27e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
81df3c41c9bf1dd0ef1e90727d35d27e_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
81df3c41c9bf1dd0ef1e90727d35d27e_JaffaCakes118
-
Size
13KB
-
MD5
81df3c41c9bf1dd0ef1e90727d35d27e
-
SHA1
2542e6d7fd42a4fd16f3dac73b328a21dd8dbfc9
-
SHA256
fb822581dc19d03fc2c5590bd2fc0393d83ef1913ba3533b4571e48276123edb
-
SHA512
1d6483bd5fdb4aca6cb0f078dc75cf46214d538295400a2f87b3e9d4fefe3025a9c5a34d63968b53a23f71e6951edc251539270403313b3ba9381e4f4739754b
-
SSDEEP
384:Ka37jPi8+SeyVh56SYfhR7ezw594QDiHsvls:J3HPESJ0FhR6zSPvu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81df3c41c9bf1dd0ef1e90727d35d27e_JaffaCakes118
Files
-
81df3c41c9bf1dd0ef1e90727d35d27e_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.Upack Size: - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE