Static task
static1
Behavioral task
behavioral1
Sample
962f35a5f4d39709afa3955bc392c983_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
962f35a5f4d39709afa3955bc392c983_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
962f35a5f4d39709afa3955bc392c983_JaffaCakes118
-
Size
128KB
-
MD5
962f35a5f4d39709afa3955bc392c983
-
SHA1
f3095a526deca1a1754e4efd2cb031f8ca3d32dc
-
SHA256
f33bedb9e15bfacfb8a2ce961a05a96798f9c193c15583cd32d23e2e50b8cad7
-
SHA512
581f62056ac636dd0929d39952b6af2b79b66874501fee49f3e304a69319dfe1fdcda868d819d2af7a5bc59aa4d2877e709bf5c6a4979a41733dafd6f109b809
-
SSDEEP
1536:oAlzS3w8qT6nZBKdm4aB5g46I8Fvdi7LODGb:hlzB44f46IQAODGb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 962f35a5f4d39709afa3955bc392c983_JaffaCakes118
Files
-
962f35a5f4d39709afa3955bc392c983_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE