s
Static task
static1
Behavioral task
behavioral1
Sample
89e252f148a0ccb6ec884e62759fb403_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
89e252f148a0ccb6ec884e62759fb403_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
89e252f148a0ccb6ec884e62759fb403_JaffaCakes118
-
Size
41KB
-
MD5
89e252f148a0ccb6ec884e62759fb403
-
SHA1
5f48ab4269a44d8915dc4e40d30a1f6e192d1f73
-
SHA256
c62be820aa70421c7debf30787f0e46fb7132955878237e4f60435027951d10e
-
SHA512
a5448fa5035f7dfce9219a165cc8f88ab63734964d01ae8910052656b4cf0979547cfd75eed3b360c0883444cf41eda16ab3b551a898ebca62496903864332bb
-
SSDEEP
768:rTFSmtS90KMEWVsyB6eO+cePkMGcqwQlJiNL7uRNvLNXAWjnd+JuUZ8Cflp:rpttIMpoeDcR9neNL7+NjNQUNUC+lp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89e252f148a0ccb6ec884e62759fb403_JaffaCakes118
Files
-
89e252f148a0ccb6ec884e62759fb403_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Exports
Exports
Sections
�q�0 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�q�1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�q�2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE