Static task
static1
Behavioral task
behavioral1
Sample
9656a1504ff56afe2dbf83bc9d2d94f5_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9656a1504ff56afe2dbf83bc9d2d94f5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
9656a1504ff56afe2dbf83bc9d2d94f5_JaffaCakes118
-
Size
26KB
-
MD5
9656a1504ff56afe2dbf83bc9d2d94f5
-
SHA1
7235ba687085afb1a016212deed7bf1783a76d0a
-
SHA256
2996388d210b84905d7ed48a5071960adb727b8250e868b900598f58ea09f29c
-
SHA512
ea05ed0690e7c4c44f363aa431b84d482c18ea4c7f1c83615750a48ce9b400a69d3979731172b2b0c71beb294d0973a08b8c44e3cd1f682cc7db9ee8e077e0c8
-
SSDEEP
384:NZf9C1C6VIzkTkuPihgh9TW8MfllKqxzXSnvD2zrZ9bszCdaI+WYl43mDCHN88EJ:nRVC1FMtMiXmv6fZOz2aIEQRHN67N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9656a1504ff56afe2dbf83bc9d2d94f5_JaffaCakes118
Files
-
9656a1504ff56afe2dbf83bc9d2d94f5_JaffaCakes118.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8ts Size: 836B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE