Static task
static1
Behavioral task
behavioral1
Sample
8c6e9f39b1a30a2bcb11b41d79d6aec8_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c6e9f39b1a30a2bcb11b41d79d6aec8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
8c6e9f39b1a30a2bcb11b41d79d6aec8_JaffaCakes118
-
Size
162KB
-
MD5
8c6e9f39b1a30a2bcb11b41d79d6aec8
-
SHA1
83e14de5c0f2dc94354e7e55c1d90c6f7e63be9d
-
SHA256
06afc3ca9fafdaf968549d6a4d8160c021fee0fa28db48c2a726b1177595c82b
-
SHA512
d9048b3e5bc1403e0a4e2c806bbb4451cc99c437d1b24ddaeaa719f0d52dd2fba9ff6b421ada343ac81c00d86210c572b8cdc377afb8dc1559d710fd688a8858
-
SSDEEP
1536:eCBh0DCSl+0DemudkQb/6Qcc8Fh0gTr99HeE9xDJ:edCSl+wudkQbRViigTr99HXl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c6e9f39b1a30a2bcb11b41d79d6aec8_JaffaCakes118
Files
-
8c6e9f39b1a30a2bcb11b41d79d6aec8_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 3KB - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE